CVE-2026-95295

Analyzed Analyzed - Analysis Complete

Information Disclosure in Google Chrome on iOS

Publication date: 2026-09-29

Last updated on: 2026-10-01

Assigner: Chrome

Description

Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacker to leak sensitive information via physical access. (Chromium security severity: Medium)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-10-01

Generated

2026-10-19

AI Q&A

2026-09-29

EPSS Evaluated

2026-10-18

NVD

CVE-2026-95295

EUVD

EUVD-2026-89121

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 154.0.8037.57 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability is an information leak in Mobile in Google Chrome on iOS. It allows a local attacker with physical access to the device to obtain sensitive information.

Detection Guidance

This vulnerability requires physical access to exploit, so detection primarily involves checking the Chrome version on iOS devices. Ensure all devices run Chrome version 154.0.8037.57 or later. No network-based detection commands are applicable.

Impact Analysis

If you use Google Chrome on iOS prior to version 154.0.8037.57, an attacker with physical access to your device could exploit this to steal sensitive data.

Compliance Impact

This vulnerability involves an information leak in Google Chrome on iOS, which could allow a local attacker to access sensitive data through physical access. Such leaks may violate data protection requirements under GDPR (General Data Protection Regulation) and HIPAA (Health Insurance Portability and Accountability Act) by exposing personal or health-related information without authorization.

Mitigation Strategies

Update Google Chrome on iOS to version 154.0.8037.57 or later to address the information leak vulnerability.

Hi! I’m here to help you understand CVE-2026-95295. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70