PT-2026-88598

CVE-2026-87498

Published

2026-08-25

Updated

2026-09-16

Description by

CVSS 3.1

3.1

Low

MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36

Description Missing authorization in the WebUI allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. The web origin policy is a security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin.

Recommendations Update Google Chrome to version 153.0.8010.36 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-862: Missing Authorization

Related identifiers

CVE-2026-87498

BDU:2026-17116

ECHO-6432-9EAD-F50C