CyberRota Analysis
AI-GeneratedA vulnerability in Google Chrome prior to version 153.0.8010.36 allows remote attackers to exploit incomplete cleanup in the browser, enabling them to bypass web origin policies through a maliciously crafted Chrome extension. This could lead to unauthorized access to sensitive data or actions within the browser environment. Organizations using affected versions of Chrome should prioritize updating to mitigate potential risks associated with social engineering attacks.
CVE
CVE-2026-87436
Severity
MEDIUM
CVSS
6.5
EPSS
0.33%
Chrome
Original NVD Description
Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)