CVE-2026-95326

Analyzed Analyzed - Analysis Complete

Bluetooth Memory Corruption in Google Chrome

Publication date: 2026-09-29

Last updated on: 2026-10-02

Assigner: Chrome

Description

Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-10-02

Generated

2026-10-19

AI Q&A

2026-09-29

EPSS Evaluated

2026-10-18

NVD

CVE-2026-95326

EUVD

EUVD-2026-89159

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 154.0.8037.57 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-459	The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

Attack-Flow Graph

Executive Summary

This vulnerability is an incomplete cleanup issue in Bluetooth functionality within Google Chrome before version 154.0.8037.57. It allows a remote attacker to bypass system access restrictions through a crafted HTML page by leveraging social engineering tactics.

Detection Guidance

This vulnerability is specific to Google Chrome and involves incomplete cleanup in Bluetooth functionality. Detection primarily involves checking the installed version of Google Chrome. If your Chrome version is prior to 154.0.8037.57, it is vulnerable. Use the following command to check your Chrome version: On Windows, open Chrome, go to chrome://settings/help. On macOS/Linux, open a terminal and run google-chrome --version or check via package manager like apt list --installed | grep google-chrome-stable.

Impact Analysis

An attacker could trick you into visiting a malicious webpage, potentially bypassing security restrictions to access restricted system features or data via Bluetooth in Chrome.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it involves a local system access bypass via social engineering in Google Chrome. No data exposure or processing violations are described.

Mitigation Strategies

Update Google Chrome to version 154.0.8037.57 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-95326. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70