PT-2026-88638

CVE-2026-87538

Published

2026-06-10

Updated

2026-09-16

Description by

CVSS 3.1

4.2

Medium

MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36

Description A clickjacking issue in the Input component allows a remote attacker to spoof UI elements using a crafted HTML page. This exploitation requires the attacker to have already compromised the renderer process and to use social engineering techniques.

Recommendations Update Google Chrome to version 153.0.8010.36 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-1021: Improper Restriction of Rendered UI Layers or Frames

Related identifiers

CVE-2026-87538

BDU:2026-17580

ECHO-0CDB-9FEC-4FC8