Information Leak in Google Chrome Affects User Privacy and Security

CVE-2026-95367

What is CVE-2026-95367?

A vulnerability exists in Google Chrome that enables an attacker to exploit an information leak through the DataTransfer functionality. Prior to version 154.0.8037.57, this flaw could allow a remote attacker, who had already compromised the renderer process, to utilize social engineering techniques to retrieve sensitive information by employing a specially crafted HTML page. This breach highlights essential concerns regarding user privacy and the security of personal data.

References