CVE-2026-95344

Katalog CVE

CVSS 8.0 · High EPSS 0,23%

Kerentanan Time-of-check Time-of-use (TOCTOU) Race Condition pada google chrome. Skor CVSS 3.1 8.0 (High) menurut CISA ADP.

Deskripsi (NVD)

Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. (Chromium security severity: Medium)

Rincian

Terbit di NVD

29 September 2026

Terakhir diubah

1 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

8.0 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html release notes · advisory vendor
• https://issues.chromium.org/issues/548611433 exploit · issue tracking · mitigasi · advisory vendor