CyberRota Analysis
AI-GeneratedA vulnerability in Google Chrome prior to version 154.0.8037.57 allows remote attackers to exploit missing authorization in extensions, enabling them to bypass site isolation through a specially crafted HTML page. This could lead to unauthorized access to sensitive data and compromise user security. Organizations using affected versions of Chrome should prioritize updates to mitigate potential risks associated with this flaw.
CVE
CVE-2026-95301
Severity
HIGH
CVSS
8.1
EPSS
0.32%
Chrome
Original NVD Description
Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
Related CVEs
Other vulnerabilities affecting the same vendor(s)