CVE-2026-95315

Published 29 September 2026 · tracked since 30 September 2026

Description

Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-95327 MEDIUM 6.5
• CVE-2026-95328 MEDIUM 6.5
• CVE-2026-95329 CRITICAL 9.6
• CVE-2026-95331 CRITICAL 9.6
• CVE-2026-95318 CRITICAL 9.6
• CVE-2026-95319 HIGH 8.3
• CVE-2026-95322 HIGH 8.3
• CVE-2026-95325 CRITICAL 9.6
• CVE-2026-95310 CRITICAL 9.6
• CVE-2026-95311 CRITICAL 9.6

→ Open the live CVE board · all tools