Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #6

Google Chrome extension flaw exposes cross-origin data

Original: 🚨 EUVD-2026-93704 📊 Score: 4.3/10 (CVSS v3.1) 📦 Product: Chrome 🏢 Vendor: Google 📅 Published: 2026-10-06 | Updated: 2026

A medium-severity vulnerability, EUVD-2026-93704, has been published for Google Chrome. The flaw, rated 4.3 out of 10 under CVSS v3.1, involves improper resource exposure in browser extensions. Versions of Chrome prior to 155.0.8059.39 are affected, and a remote attacker could obtain cross-origin data through a crafted request. Users are advised to update their browser to the latest version, released on 6 October 2026 with an update the following day.

Why now: Chrome is one of the world's most widely used browsers, so any newly published security flaw prompts users to check whether they need to update.

Google ChromeGoogle

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 2 d ago to 2 d ago.

Evidence

• 🚨 EUVD-2026-93704 📊 Score: 4.3/10 (CVSS v3.1) 📦 Product: Chrome 🏢 Vendor: Google 📅 Published: 2026-10-06 | Updated: 2026-10-07 📝 Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1357599