CVE-2026-95308
LOW
INFO
Priority: 0.01
BB Relevance:
47/100
Published: 2026-09-29
Modified: 2026-11-03
First seen: 2026-11-03
Status: active
Attack Surface
Network
No Auth
Scope Change
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
None
UI:
Required
S:
Changed
C:
Low
I:
None
A:
None
Description
Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low)