GoogleCVE-2026-95346

Google Chrome: spoofing

Medium4.8CVE-2026-95346 · Published Sep 29, 2026 · updated Sep 30, 2026

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted network traffic. (Chromium security severity: Medium)

Google advisory

Affected versions

Package	Affected	Fixed in
Chrome Product	>= 154.0.8037.57, < 154.0.8037.57	154.0.8037.57

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
Severity from: CISA (its enrichment of the CVE record)
Weakness: CWE-451

More Google advisories

All Google

Date	Advisory	Severity	Fixed in
Sep 29	Google Chrome: improper authorization High7.5Sep 29 CVE-2026-102327154.0.8037.92	High7.5	154.0.8037.92
Sep 29	Google Chrome: type confusion High8.8Sep 29 CVE-2026-102328154.0.8037.92	High8.8	154.0.8037.92
Sep 29	Google Chrome: cross-site scripting Medium6.1Sep 29 CVE-2026-102329154.0.8037.92	Medium6.1	154.0.8037.92
Sep 29	Google Chrome: improper authorization Medium6.5Sep 29 CVE-2026-102330154.0.8037.92	Medium6.5	154.0.8037.92
Sep 29	Google Chrome: buffer overflow Critical9.6Sep 29 CVE-2026-102331154.0.8037.92	Critical9.6	154.0.8037.92
Sep 29	Google Chrome: out-of-bounds read Medium4.7Sep 29 CVE-2026-102318154.0.8037.92	Medium4.7	154.0.8037.92

Affected versions

More Google advisories

Critical advisories by email