PT-2026-93148

CVE-2026-91730

Published

2026-08-07

Updated

2026-10-28

Description by

CVSS 3.1

3.1

Low

MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47

Description Incomplete cleanup in the GetUserMedia() function allows a remote attacker to obtain cross-origin data. This occurs when an attacker has already compromised the renderer process and uses social engineering to lure a user to a crafted HTML page.

Recommendations Update to version 153.0.8010.47 or later.

Exploitability

Fix

Impacts

Researchers

Daisuke Hatakeyama

Keita Sode

Vendors

Affected products

Weakness enumeration

CWE-459: Incomplete Cleanup

Related identifiers