Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-6513-1 | chromium security update |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 29 Sep 2026 19:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Google
Google chrome |
|
| Vendors & Products |
Google
Google chrome |
Tue, 29 Sep 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) | |
| Weaknesses | CWE-863 | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: Chrome
Published:
Updated: 2026-09-29T17:31:49.989Z
Reserved: 2026-09-22T05:08:40.920Z
Link: CVE-2026-95314
No data.
Status : Awaiting Analysis
Published: 2026-09-29T18:17:23.580
Modified: 2026-09-29T18:56:13.190
Link: CVE-2026-95314
No data.
OpenCVE Enrichment
Updated: 2026-09-29T19:30:17Z
Weaknesses
Debian DSA