CVE-2026-93376: Google Chrome

Medium severity, CVSS 6.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. (Chromium security severity: Medium)

Affected products

• Google Chrome: before 153.0.8010.52 (fixed in 153.0.8010.52)

Published 2026-09-17. Last modified 2026-09-21.