CVE-2026-95276

Published 29 September 2026 · tracked since 30 September 2026

Description

Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Medium)

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-95327 MEDIUM 6.5
• CVE-2026-95328 MEDIUM 6.5
• CVE-2026-95329 CRITICAL 9.6
• CVE-2026-95331 CRITICAL 9.6
• CVE-2026-95318 CRITICAL 9.6
• CVE-2026-95319 HIGH 8.3
• CVE-2026-95322 HIGH 8.3
• CVE-2026-95325 CRITICAL 9.6
• CVE-2026-95310 CRITICAL 9.6
• CVE-2026-95311 CRITICAL 9.6

→ Open the live CVE board · all tools