CVE-2026-87582

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36

Description A confused deputy issue in DataTransfer allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. A confused deputy is a security issue where a privileged entity is tricked by a less privileged entity into performing an action on its behalf.

Recommendations Update to version 153.0.8010.36 or later.