Confused Deputy Vulnerability in Google Chrome by Google
CVE-2026-95361

Currently unrated

Key Information:

Vendor: Google
Status: Chrome
Vendor: CVE Published:; 29 September 2026

What is CVE-2026-95361?

A vulnerability in Google Chrome that allows remote attackers to bypass web origin policy through a creatively crafted HTML page, utilizing social engineering tactics. This could lead to unintended access or actions within the user's browser, highlighting the importance of maintaining updated software to protect against such threats.

Affected Version(s)

Chrome 154.0.8037.57

References

https://chromereleases.googleblog.com/2026/09/stable-chan...

https://issues.chromium.org/issues/533095855

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 29, 2026
Vulnerability Reserved
Sep 22, 2026

CVE-2026-95361 Data

JSON