CVE-2026-93385: Infoleak

Q: Which Chrome deployments need updating?

Google Chrome versions prior to 153.0.8010.52 are affected. Update affected installations to 153.0.8010.52 or later.

Q: What access does an attacker need to exploit this issue?

The issue can be exploited remotely through a crafted HTML page. The provided information does not indicate that local system access is required.

Published Sep 17, 2026

Updated

Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Google Chrome<153.0.8010.52

Event History

Sep 17, 2026

CVE Published

via MITRE·09:08 PM

Data Sourced

via MITRE·09:08 PM

DescriptionWeakness

Frequently Asked Questions

Which Chrome deployments need updating?

Google Chrome versions prior to 153.0.8010.52 are affected. Update affected installations to 153.0.8010.52 or later.

What access does an attacker need to exploit this issue?

The issue can be exploited remotely through a crafted HTML page. The provided information does not indicate that local system access is required.