CVE-2026-102317

Vendor

Microsoft, Google

Product

windows, chrome, chromium

CVSS

8.6

EPSS

0.002 (p12)

Exposure class

Browser

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 27
   CVE NVD 29 Sep 2026

   Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to potentially execute arbitrary…

   Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

   CVSS 8.6 CVE-2026-102317 Microsoft Google
2. 19
   Chrome release Chrome Releases 29 Sep 2026

   Stable Channel Update for Desktop

   The Stable channel has been updated to 154.0.8037.92/.93 for Windows and Mac and 154.0.8037.92 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes…

   CVE-2026-102331CVE-2026-102317CVE-2026-102312+29 more Google