---
id: CVE-2026-95376
title: >-
  Externally controlled reference in DevTools in Google Chrome prior to
  154.0.8037.57 allowed an adjacent attacker leveraging social engineering to
  bypass system access restrictions via crafted network traffic
summary: >-
  Externally controlled reference in DevTools in Google Chrome prior to
  154.0.8037.57 allowed an adjacent attacker leveraging social engineering to
  bypass system access restrictions via crafted network traffic. (Chromium
  security severity:…
severity: none
cwe:
  - CWE-610
vendor: Google
product: Chrome
affected:
  - Chrome >= 154.0.8037.57 < 154.0.8037.57
published: '2026-09-29'
updated: '2026-09-29'
sourceUpdated: '2026-09-29T18:56:13.190'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-95376'
references:
  - url: >-
      https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html
    label: chrome-cve-admin@google.com
  - url: 'https://issues.chromium.org/issues/513134076'
    label: chrome-cve-admin@google.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-29T17:41:02.238Z'
---

## Overview

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.