PT-2026-88593

CVE-2026-87493

·

Published

2026-06-14

·

Updated

2026-09-16

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:C/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36
Description Missing authorization in the FileSystem component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit a crafted HTML page.
Recommendations Update Google Chrome to version 153.0.8010.36 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2026-87493
BDU:2026-17562
ECHO-DD42-543A-97AD
OPENSUSE-SU-2026:11750-1
OPENSUSE-SU-2026:21858-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com