Vulnerability-Lookup

CERTFR-2026-AVI-1139

Vulnerability from certfr_avis - Published: 2026-09-09 - Updated: 2026-09-09

De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Google indique que la vulnérabilité CVE-2026-87491 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Google	Chrome	Chrome versions antérieures à 153.0.8010.37 pour Mac
Google	Chrome	Chrome versions antérieures à 153.0.8010.36 pour Linux
Google	Chrome	Chrome versions antérieures à 153.0.8010.36 pour Windows

References

Title

Publication Time

Tags

Bulletin de sécurité Google Chrome

2026-09-08

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 153.0.8010.37 pour Mac",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    },
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 153.0.8010.36 pour Linux",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    },
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 153.0.8010.36 pour Windows",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-87464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87464"
    },
    {
      "name": "CVE-2026-87646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87646"
    },
    {
      "name": "CVE-2026-87445",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87445"
    },
    {
      "name": "CVE-2026-87643",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87643"
    },
    {
      "name": "CVE-2026-87619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87619"
    },
    {
      "name": "CVE-2026-87567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87567"
    },
    {
      "name": "CVE-2026-87486",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87486"
    },
    {
      "name": "CVE-2026-87541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87541"
    },
    {
      "name": "CVE-2026-87501",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87501"
    },
    {
      "name": "CVE-2026-87626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87626"
    },
    {
      "name": "CVE-2026-87656",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87656"
    },
    {
      "name": "CVE-2026-87476",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87476"
    },
    {
      "name": "CVE-2026-87622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87622"
    },
    {
      "name": "CVE-2026-87654",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87654"
    },
    {
      "name": "CVE-2026-87583",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87583"
    },
    {
      "name": "CVE-2026-87592",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87592"
    },
    {
      "name": "CVE-2026-87442",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87442"
    },
    {
      "name": "CVE-2026-87450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87450"
    },
    {
      "name": "CVE-2026-87431",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87431"
    },
    {
      "name": "CVE-2026-87519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87519"
    },
    {
      "name": "CVE-2026-87598",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87598"
    },
    {
      "name": "CVE-2026-87462",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87462"
    },
    {
      "name": "CVE-2026-87657",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87657"
    },
    {
      "name": "CVE-2026-87437",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87437"
    },
    {
      "name": "CVE-2026-87623",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87623"
    },
    {
      "name": "CVE-2026-87447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87447"
    },
    {
      "name": "CVE-2026-87610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87610"
    },
    {
      "name": "CVE-2026-87484",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87484"
    },
    {
      "name": "CVE-2026-87461",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87461"
    },
    {
      "name": "CVE-2026-87444",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87444"
    },
    {
      "name": "CVE-2026-87585",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87585"
    },
    {
      "name": "CVE-2026-87438",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87438"
    },
    {
      "name": "CVE-2026-87509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87509"
    },
    {
      "name": "CVE-2026-87498",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87498"
    },
    {
      "name": "CVE-2026-87653",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87653"
    },
    {
      "name": "CVE-2026-87453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87453"
    },
    {
      "name": "CVE-2026-87595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87595"
    },
    {
      "name": "CVE-2026-87550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87550"
    },
    {
      "name": "CVE-2026-87537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87537"
    },
    {
      "name": "CVE-2026-87524",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87524"
    },
    {
      "name": "CVE-2026-87439",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87439"
    },
    {
      "name": "CVE-2026-87568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87568"
    },
    {
      "name": "CVE-2026-87607",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87607"
    },
    {
      "name": "CVE-2026-87544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87544"
    },
    {
      "name": "CVE-2026-87639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87639"
    },
    {
      "name": "CVE-2026-87650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87650"
    },
    {
      "name": "CVE-2026-87429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87429"
    },
    {
      "name": "CVE-2026-87635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87635"
    },
    {
      "name": "CVE-2026-87630",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87630"
    },
    {
      "name": "CVE-2026-87542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87542"
    },
    {
      "name": "CVE-2026-87517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87517"
    },
    {
      "name": "CVE-2026-87605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87605"
    },
    {
      "name": "CVE-2026-87443",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87443"
    },
    {
      "name": "CVE-2026-87434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87434"
    },
    {
      "name": "CVE-2026-87569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87569"
    },
    {
      "name": "CVE-2026-87492",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87492"
    },
    {
      "name": "CVE-2026-87454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87454"
    },
    {
      "name": "CVE-2026-87596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87596"
    },
    {
      "name": "CVE-2026-87640",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87640"
    },
    {
      "name": "CVE-2026-87532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87532"
    },
    {
      "name": "CVE-2026-87488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87488"
    },
    {
      "name": "CVE-2026-87483",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87483"
    },
    {
      "name": "CVE-2026-87658",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87658"
    },
    {
      "name": "CVE-2026-87573",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87573"
    },
    {
      "name": "CVE-2026-87564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87564"
    },
    {
      "name": "CVE-2026-87499",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87499"
    },
    {
      "name": "CVE-2026-87468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87468"
    },
    {
      "name": "CVE-2026-87606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87606"
    },
    {
      "name": "CVE-2026-87652",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87652"
    },
    {
      "name": "CVE-2026-87632",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87632"
    },
    {
      "name": "CVE-2026-87511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87511"
    },
    {
      "name": "CVE-2026-87515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87515"
    },
    {
      "name": "CVE-2026-87496",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87496"
    },
    {
      "name": "CVE-2026-87588",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87588"
    },
    {
      "name": "CVE-2026-87469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87469"
    },
    {
      "name": "CVE-2026-87575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87575"
    },
    {
      "name": "CVE-2026-87601",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87601"
    },
    {
      "name": "CVE-2026-87566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87566"
    },
    {
      "name": "CVE-2026-87617",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87617"
    },
    {
      "name": "CVE-2026-87481",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87481"
    },
    {
      "name": "CVE-2026-87480",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87480"
    },
    {
      "name": "CVE-2026-87553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87553"
    },
    {
      "name": "CVE-2026-87641",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87641"
    },
    {
      "name": "CVE-2026-87514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87514"
    },
    {
      "name": "CVE-2026-87594",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87594"
    },
    {
      "name": "CVE-2026-87576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87576"
    },
    {
      "name": "CVE-2026-87631",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87631"
    },
    {
      "name": "CVE-2026-87614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87614"
    },
    {
      "name": "CVE-2026-87649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87649"
    },
    {
      "name": "CVE-2026-87455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87455"
    },
    {
      "name": "CVE-2026-87535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87535"
    },
    {
      "name": "CVE-2026-87436",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87436"
    },
    {
      "name": "CVE-2026-87621",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87621"
    },
    {
      "name": "CVE-2026-87516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87516"
    },
    {
      "name": "CVE-2026-87551",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87551"
    },
    {
      "name": "CVE-2026-87525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87525"
    },
    {
      "name": "CVE-2026-87608",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87608"
    },
    {
      "name": "CVE-2026-87491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87491"
    },
    {
      "name": "CVE-2026-87531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87531"
    },
    {
      "name": "CVE-2026-87513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87513"
    },
    {
      "name": "CVE-2026-87547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87547"
    },
    {
      "name": "CVE-2026-87558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87558"
    },
    {
      "name": "CVE-2026-87495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87495"
    },
    {
      "name": "CVE-2026-87505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87505"
    },
    {
      "name": "CVE-2026-87482",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87482"
    },
    {
      "name": "CVE-2026-87440",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87440"
    },
    {
      "name": "CVE-2026-87529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87529"
    },
    {
      "name": "CVE-2026-87593",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87593"
    },
    {
      "name": "CVE-2026-87609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87609"
    },
    {
      "name": "CVE-2026-87590",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87590"
    },
    {
      "name": "CVE-2026-87615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87615"
    },
    {
      "name": "CVE-2026-87536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87536"
    },
    {
      "name": "CVE-2026-87459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87459"
    },
    {
      "name": "CVE-2026-87561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87561"
    },
    {
      "name": "CVE-2026-87638",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87638"
    },
    {
      "name": "CVE-2026-87451",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87451"
    },
    {
      "name": "CVE-2026-87543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87543"
    },
    {
      "name": "CVE-2026-87527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87527"
    },
    {
      "name": "CVE-2026-87637",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87637"
    },
    {
      "name": "CVE-2026-87540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87540"
    },
    {
      "name": "CVE-2026-87627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87627"
    },
    {
      "name": "CVE-2026-87589",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87589"
    },
    {
      "name": "CVE-2026-87557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87557"
    },
    {
      "name": "CVE-2026-87539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87539"
    },
    {
      "name": "CVE-2026-87581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87581"
    },
    {
      "name": "CVE-2026-87457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87457"
    },
    {
      "name": "CVE-2026-87651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87651"
    },
    {
      "name": "CVE-2026-87433",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87433"
    },
    {
      "name": "CVE-2026-87642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87642"
    },
    {
      "name": "CVE-2026-87449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87449"
    },
    {
      "name": "CVE-2026-87586",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87586"
    },
    {
      "name": "CVE-2026-87616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87616"
    },
    {
      "name": "CVE-2026-87528",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87528"
    },
    {
      "name": "CVE-2026-87556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87556"
    },
    {
      "name": "CVE-2026-87522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87522"
    },
    {
      "name": "CVE-2026-87494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87494"
    },
    {
      "name": "CVE-2026-87448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87448"
    },
    {
      "name": "CVE-2026-87477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87477"
    },
    {
      "name": "CVE-2026-87478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87478"
    },
    {
      "name": "CVE-2026-87636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87636"
    },
    {
      "name": "CVE-2026-87430",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87430"
    },
    {
      "name": "CVE-2026-87435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87435"
    },
    {
      "name": "CVE-2026-87602",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87602"
    },
    {
      "name": "CVE-2026-87452",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87452"
    },
    {
      "name": "CVE-2026-87648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87648"
    },
    {
      "name": "CVE-2026-87600",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87600"
    },
    {
      "name": "CVE-2026-87572",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87572"
    },
    {
      "name": "CVE-2026-87463",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87463"
    },
    {
      "name": "CVE-2026-87507",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87507"
    },
    {
      "name": "CVE-2026-87574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87574"
    },
    {
      "name": "CVE-2026-87458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87458"
    },
    {
      "name": "CVE-2026-87493",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87493"
    },
    {
      "name": "CVE-2026-87470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87470"
    },
    {
      "name": "CVE-2026-87570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87570"
    },
    {
      "name": "CVE-2026-87578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87578"
    },
    {
      "name": "CVE-2026-87645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87645"
    },
    {
      "name": "CVE-2026-87580",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87580"
    },
    {
      "name": "CVE-2026-87604",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87604"
    },
    {
      "name": "CVE-2026-87473",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87473"
    },
    {
      "name": "CVE-2026-87487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87487"
    },
    {
      "name": "CVE-2026-87647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87647"
    },
    {
      "name": "CVE-2026-87446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87446"
    },
    {
      "name": "CVE-2026-87633",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87633"
    },
    {
      "name": "CVE-2026-87512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87512"
    },
    {
      "name": "CVE-2026-87587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87587"
    },
    {
      "name": "CVE-2026-87634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87634"
    },
    {
      "name": "CVE-2026-87546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87546"
    },
    {
      "name": "CVE-2026-87432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87432"
    },
    {
      "name": "CVE-2026-87479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87479"
    },
    {
      "name": "CVE-2026-87625",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87625"
    },
    {
      "name": "CVE-2026-87518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87518"
    },
    {
      "name": "CVE-2026-87545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87545"
    },
    {
      "name": "CVE-2026-87465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87465"
    },
    {
      "name": "CVE-2026-87560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87560"
    },
    {
      "name": "CVE-2026-87563",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87563"
    },
    {
      "name": "CVE-2026-87534",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87534"
    },
    {
      "name": "CVE-2026-87508",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87508"
    },
    {
      "name": "CVE-2026-87613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87613"
    },
    {
      "name": "CVE-2026-87472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87472"
    },
    {
      "name": "CVE-2026-87628",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87628"
    },
    {
      "name": "CVE-2026-87565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87565"
    },
    {
      "name": "CVE-2026-87599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87599"
    },
    {
      "name": "CVE-2026-87552",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87552"
    },
    {
      "name": "CVE-2026-87474",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87474"
    },
    {
      "name": "CVE-2026-87467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87467"
    },
    {
      "name": "CVE-2026-87612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87612"
    },
    {
      "name": "CVE-2026-87549",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87549"
    },
    {
      "name": "CVE-2026-87611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87611"
    },
    {
      "name": "CVE-2026-87603",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87603"
    },
    {
      "name": "CVE-2026-87644",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87644"
    },
    {
      "name": "CVE-2026-87655",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87655"
    },
    {
      "name": "CVE-2026-87530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87530"
    },
    {
      "name": "CVE-2026-87506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87506"
    },
    {
      "name": "CVE-2026-87466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87466"
    },
    {
      "name": "CVE-2026-87521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87521"
    },
    {
      "name": "CVE-2026-87497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87497"
    },
    {
      "name": "CVE-2026-87441",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87441"
    },
    {
      "name": "CVE-2026-87471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87471"
    },
    {
      "name": "CVE-2026-87577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87577"
    },
    {
      "name": "CVE-2026-87597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87597"
    },
    {
      "name": "CVE-2026-87460",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87460"
    },
    {
      "name": "CVE-2026-87571",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87571"
    },
    {
      "name": "CVE-2026-87591",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87591"
    },
    {
      "name": "CVE-2026-87618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87618"
    },
    {
      "name": "CVE-2026-87548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87548"
    },
    {
      "name": "CVE-2026-87538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87538"
    },
    {
      "name": "CVE-2026-87555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87555"
    },
    {
      "name": "CVE-2026-87620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87620"
    },
    {
      "name": "CVE-2026-87520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87520"
    },
    {
      "name": "CVE-2026-87490",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87490"
    },
    {
      "name": "CVE-2026-87475",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87475"
    },
    {
      "name": "CVE-2026-87559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87559"
    },
    {
      "name": "CVE-2026-87500",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87500"
    },
    {
      "name": "CVE-2026-87504",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87504"
    },
    {
      "name": "CVE-2026-87582",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87582"
    },
    {
      "name": "CVE-2026-87523",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87523"
    },
    {
      "name": "CVE-2026-87624",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87624"
    },
    {
      "name": "CVE-2026-87579",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87579"
    },
    {
      "name": "CVE-2026-87502",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87502"
    },
    {
      "name": "CVE-2026-87489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87489"
    },
    {
      "name": "CVE-2026-87526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87526"
    },
    {
      "name": "CVE-2026-87510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87510"
    },
    {
      "name": "CVE-2026-87533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87533"
    },
    {
      "name": "CVE-2026-87584",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87584"
    },
    {
      "name": "CVE-2026-87562",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87562"
    },
    {
      "name": "CVE-2026-87503",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87503"
    },
    {
      "name": "CVE-2026-87629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87629"
    },
    {
      "name": "CVE-2026-87485",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87485"
    },
    {
      "name": "CVE-2026-87554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87554"
    },
    {
      "name": "CVE-2026-87456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87456"
    }
  ],
  "initial_release_date": "2026-09-09T00:00:00",
  "last_revision_date": "2026-09-09T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1139",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-09-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n\nGoogle indique que la vuln\u00e9rabilit\u00e9 CVE-2026-87491 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
  "vendor_advisories": [
    {
      "published_at": "2026-09-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Google Chrome",
      "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"
    }
  ]
}

CVE-2026-87429 (GCVE-0-2026-87429)

Vulnerability from cvelistv5 – Published: 2026-09-09 00:10 – Updated: 2026-09-10 19:06

Summary

Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-10 18:35 UTC

CWE

CWE-862 - Missing authorization

Assigner

Chrome Google root

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/09/sta…
https://issues.chromium.org/issues/497025031

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 153.0.8010.36 , < 153.0.8010.36 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-87429",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-10T18:35:42.583852Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T19:06:44.946Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "153.0.8010.36",
              "status": "affected",
              "version": "153.0.8010.36",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "Missing authorization",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T00:10:00.086Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"
        },
        {
          "url": "https://issues.chromium.org/issues/497025031"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-87429",
    "datePublished": "2026-09-09T00:10:00.086Z",
    "dateReserved": "2026-09-08T22:22:17.581Z",
    "dateUpdated": "2026-09-10T19:06:44.946Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-87430 (GCVE-0-2026-87430)

Vulnerability from cvelistv5 – Published: 2026-09-09 00:10 – Updated: 2026-09-10 03:55

Summary

Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-09 00:00 UTC

CWE

CWE-122 - Buffer overflow

Assigner

Chrome Google root

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/09/sta…
https://issues.chromium.org/issues/542449805

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 153.0.8010.36 , < 153.0.8010.36 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-87430",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-09T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T03:55:21.393Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "153.0.8010.36",
              "status": "affected",
              "version": "153.0.8010.36",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Buffer overflow",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T00:10:07.237Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"
        },
        {
          "url": "https://issues.chromium.org/issues/542449805"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-87430",
    "datePublished": "2026-09-09T00:10:07.237Z",
    "dateReserved": "2026-09-08T22:22:21.578Z",
    "dateUpdated": "2026-09-10T03:55:21.393Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-87431 (GCVE-0-2026-87431)

Vulnerability from cvelistv5 – Published: 2026-09-09 00:09 – Updated: 2026-09-10 19:07

Summary

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-10 18:57 UTC

CWE

CWE-862 - Missing authorization

Assigner

Chrome Google root

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/09/sta…
https://issues.chromium.org/issues/523313374

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 153.0.8010.36 , < 153.0.8010.36 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-87431",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-10T18:57:14.251143Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T19:07:39.427Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "153.0.8010.36",
              "status": "affected",
              "version": "153.0.8010.36",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "Missing authorization",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T00:09:56.003Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"
        },
        {
          "url": "https://issues.chromium.org/issues/523313374"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-87431",
    "datePublished": "2026-09-09T00:09:56.003Z",
    "dateReserved": "2026-09-08T22:22:25.074Z",
    "dateUpdated": "2026-09-10T19:07:39.427Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-87432 (GCVE-0-2026-87432)

Vulnerability from cvelistv5 – Published: 2026-09-09 00:09 – Updated: 2026-09-09 19:44

Summary

Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

Severity

4.2 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-09 19:39 UTC

CWE

CWE-863 - Incorrect authorization

Assigner

Chrome Google root

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/09/sta…
https://issues.chromium.org/issues/511820041

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 153.0.8010.36 , < 153.0.8010.36 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 4.2,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-87432",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-09T19:39:23.898647Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-09T19:44:09.135Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "153.0.8010.36",
              "status": "affected",
              "version": "153.0.8010.36",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "Incorrect authorization",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T00:09:47.333Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"
        },
        {
          "url": "https://issues.chromium.org/issues/511820041"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-87432",
    "datePublished": "2026-09-09T00:09:47.333Z",
    "dateReserved": "2026-09-08T22:22:27.252Z",
    "dateUpdated": "2026-09-09T19:44:09.135Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-87433 (GCVE-0-2026-87433)

Vulnerability from cvelistv5 – Published: 2026-09-09 00:09 – Updated: 2026-09-10 15:35

Summary

Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-10 15:35 UTC

CWE

CWE-367 - Race condition

Assigner

Chrome Google root

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/09/sta…
https://issues.chromium.org/issues/497574154

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 153.0.8010.36 , < 153.0.8010.36 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-87433",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-10T15:35:27.045988Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T15:35:47.095Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "153.0.8010.36",
              "status": "affected",
              "version": "153.0.8010.36",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-367",
              "description": "Race condition",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T00:09:41.396Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"
        },
        {
          "url": "https://issues.chromium.org/issues/497574154"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-87433",
    "datePublished": "2026-09-09T00:09:41.396Z",
    "dateReserved": "2026-09-08T22:22:29.338Z",
    "dateUpdated": "2026-09-10T15:35:47.095Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-87434 (GCVE-0-2026-87434)

Vulnerability from cvelistv5 – Published: 2026-09-09 00:09 – Updated: 2026-09-09 17:10

Summary

Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Severity

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-09 17:09 UTC

CWE

CWE-862 - Missing authorization

Assigner

Chrome Google root

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/09/sta…
https://issues.chromium.org/issues/493322521

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 153.0.8010.36 , < 153.0.8010.36 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 3.1,
              "baseSeverity": "LOW",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-87434",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-09T17:09:49.153271Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-09T17:10:46.005Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "153.0.8010.36",
              "status": "affected",
              "version": "153.0.8010.36",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "Missing authorization",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T00:09:39.050Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"
        },
        {
          "url": "https://issues.chromium.org/issues/493322521"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-87434",
    "datePublished": "2026-09-09T00:09:39.050Z",
    "dateReserved": "2026-09-08T22:22:31.490Z",
    "dateUpdated": "2026-09-09T17:10:46.005Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-87435 (GCVE-0-2026-87435)

Vulnerability from cvelistv5 – Published: 2026-09-09 00:09 – Updated: 2026-09-09 14:32

Summary

Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-09 14:32 UTC

CWE

CWE-200 - Information leak

Assigner

Chrome Google root

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/09/sta…
https://issues.chromium.org/issues/533070113

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 153.0.8010.36 , < 153.0.8010.36 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-87435",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-09T14:32:17.202530Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-09T14:32:23.028Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "153.0.8010.36",
              "status": "affected",
              "version": "153.0.8010.36",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "Information leak",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T00:09:56.907Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"
        },
        {
          "url": "https://issues.chromium.org/issues/533070113"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-87435",
    "datePublished": "2026-09-09T00:09:56.907Z",
    "dateReserved": "2026-09-08T22:22:33.136Z",
    "dateUpdated": "2026-09-09T14:32:23.028Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-87436 (GCVE-0-2026-87436)

Vulnerability from cvelistv5 – Published: 2026-09-09 00:09 – Updated: 2026-09-10 18:23

Summary

Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-10 18:23 UTC

CWE

CWE-459 - Incomplete cleanup

Assigner

Chrome Google root

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/09/sta…
https://issues.chromium.org/issues/511754574

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 153.0.8010.36 , < 153.0.8010.36 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-87436",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-10T18:23:28.491775Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T18:23:43.372Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "153.0.8010.36",
              "status": "affected",
              "version": "153.0.8010.36",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-459",
              "description": "Incomplete cleanup",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T00:09:46.858Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"
        },
        {
          "url": "https://issues.chromium.org/issues/511754574"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-87436",
    "datePublished": "2026-09-09T00:09:46.858Z",
    "dateReserved": "2026-09-08T22:22:35.193Z",
    "dateUpdated": "2026-09-10T18:23:43.372Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-87437 (GCVE-0-2026-87437)

Vulnerability from cvelistv5 – Published: 2026-09-09 00:10 – Updated: 2026-09-09 15:04

Summary

Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-09 15:04 UTC

CWE

CWE-200 - Information leak

Assigner

Chrome Google root

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/09/sta…
https://issues.chromium.org/issues/540082621

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 153.0.8010.36 , < 153.0.8010.36 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-87437",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-09T15:04:11.400894Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-09T15:04:28.930Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "153.0.8010.36",
              "status": "affected",
              "version": "153.0.8010.36",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "Information leak",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T00:10:06.637Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"
        },
        {
          "url": "https://issues.chromium.org/issues/540082621"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-87437",
    "datePublished": "2026-09-09T00:10:06.637Z",
    "dateReserved": "2026-09-08T22:22:38.211Z",
    "dateUpdated": "2026-09-09T15:04:28.930Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-87438 (GCVE-0-2026-87438)

Vulnerability from cvelistv5 – Published: 2026-09-09 00:09 – Updated: 2026-09-10 03:56

Summary

Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-09 00:00 UTC

CWE

CWE-787 - Out of bounds write

Assigner

Chrome Google root

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/09/sta…
https://issues.chromium.org/issues/548127218

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 153.0.8010.36 , < 153.0.8010.36 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.6,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-87438",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-09T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T03:56:00.254Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "153.0.8010.36",
              "status": "affected",
              "version": "153.0.8010.36",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "Out of bounds write",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T00:09:31.013Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"
        },
        {
          "url": "https://issues.chromium.org/issues/548127218"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-87438",
    "datePublished": "2026-09-09T00:09:31.013Z",
    "dateReserved": "2026-09-08T22:22:40.052Z",
    "dateUpdated": "2026-09-10T03:56:00.254Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CERTFR-2026-AVI-1139

Solutions

CVE-2026-87429 (GCVE-0-2026-87429)

CVE-2026-87430 (GCVE-0-2026-87430)

CVE-2026-87431 (GCVE-0-2026-87431)

CVE-2026-87432 (GCVE-0-2026-87432)

CVE-2026-87433 (GCVE-0-2026-87433)

CVE-2026-87434 (GCVE-0-2026-87434)

CVE-2026-87435 (GCVE-0-2026-87435)

CVE-2026-87436 (GCVE-0-2026-87436)

CVE-2026-87437 (GCVE-0-2026-87437)

CVE-2026-87438 (GCVE-0-2026-87438)

Tags

Sightings

Nomenclature