CyberRota Analysis
AI-GeneratedImproper input validation in the FedCM component of Google Chrome versions prior to 153.0.8010.36 allows remote attackers to spoof UI elements through a malicious HTML page, potentially misleading users and compromising their interactions with the browser. Organizations using affected versions of Chrome should prioritize patching to mitigate the risk of social engineering attacks and ensure user trust in the browser's interface.
CVE
CVE-2026-87472
Severity
MEDIUM
CVSS
4.2
EPSS
0.26%
Chrome
Original NVD Description
Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)