CVE WATCH / VULNERABILITY DETAIL

CVE-2026-106484

MEDIUMCVSS 4.4NVD feed

Published 28 October 2026 · tracked since 29 October 2026

Description

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. (Chromium security severity: Medium)

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools