Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-3940
NONE
EPSS 0.02%
Updated Mar 11, 2026
Google
CVE Details
CVE ID
CVE-2026-3940
Published Date
Mar 11, 2026
Vendor
Google
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.02%
Likelihood of exploitation in next 30 days
Percentile:
3.3th percentile (higher than 3.3% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory