CVE-2026-84325
Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- 0.23%
- 14th pct
- KEV
- No
- Class
- other
- CWE-20
Description
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. (Chromium security severity: High)
References
Status: profiled · ingested 2026-09-03T18:00:49.000Z