CVE-2026-95317

Google Chrome versions prior to 154.0.8037.57 are vulnerable due to incorrect authorization in the MediaCapture feature, which could allow remote attackers to exploit this flaw through social engineering tactics to access cross-origin data via a malicious Chrome extension. While the CVSS score is low, the potential for data exposure necessitates that organizations using affected Chrome versions prioritize updates to mitigate this risk. Users and administrators should be particularly vigilant about the extensions they install and the permissions they grant.