What is GHSA-9386-qgfg-gg42?

GHSA-9386-qgfg-gg42 is a security advisory published by GitHub Security Advisories with High severity. Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an...

Which CVE IDs does GHSA-9386-qgfg-gg42 cover?

GHSA-9386-qgfg-gg42 covers the following CVE IDs: CVE-2026-95376. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9386-qgfg-gg42?

GHSA-9386-qgfg-gg42 has a CVSS v3 base score of 8.0, published by GitHub Security Advisories.

GHSA-9386-qgfg-gg42HighCVSS 8.0

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an...

Vendor

GitHub Security Advisories

Published

September 29, 2026

Last Modified

September 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-95376 →

📋 Description

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-95376
https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html
https://issues.chromium.org/issues/513134076
https://github.com/advisories/GHSA-9386-qgfg-gg42