CyberRota Analysis
AI-GeneratedA clickjacking vulnerability exists in Trusted Web Activities within Google Chrome on Android versions prior to 153.0.8010.36, enabling local attackers to spoof the address bar through a co-installed application. This could lead to users being misled into interacting with malicious content while believing they are on a legitimate site. Android app developers and users of affected Chrome versions should prioritize updates to mitigate potential exploitation.
CVE
CVE-2026-87486
Severity
MEDIUM
CVSS
4
EPSS
0.12%
Android Chrome
Original NVD Description
Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)