CVE-2026-87540

Google Chrome versions prior to 153.0.8010.36 are vulnerable due to incorrect authorization in the Isolated component, enabling remote attackers to spoof user interface elements through specially crafted HTML pages. This could lead to phishing attacks or other social engineering exploits, compromising user trust and security. Organizations and users relying on Chrome for sensitive transactions should prioritize updating their browsers to mitigate this risk.