PT-2026-88534

CVE-2026-87434

Published

2026-03-17

Updated

2026-09-16

Description by

CVSS 3.1

3.1

Low

MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36

Description Missing authorization in Cross-Origin Resource Sharing (CORS), a mechanism that allows restricted resources on a web page to be requested from another domain, enables a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page.

Recommendations Update Google Chrome to version 153.0.8010.36 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-862: Missing Authorization

Related identifiers

CVE-2026-87434

BDU:2026-17534

ECHO-881D-E256-6199