SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-87594

MEDIUM · CVSS 5.3 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-09-09 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

Google Chrome versions prior to 153.0.8010.36 are vulnerable due to incorrect authorization in the DataTransfer component, which could allow a remote attacker to access sensitive information through a specially crafted HTML page. Organizations using affected versions should prioritize updating their Chrome installations to mitigate potential data exposure risks. This vulnerability is particularly relevant for environments where sensitive data is handled or processed.

CVE
CVE-2026-87594
Severity
MEDIUM
CVSS
5.3
EPSS
0.21%
Chrome

Original NVD Description

Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

Related CVEs

Other vulnerabilities affecting the same vendor(s)