{"id":"CVE-2026-87431","title":"Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension","summary":"Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-862"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T20:17:29.340","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87431","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/523313374","label":"chrome-cve-admin@google.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87431.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-87431"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87431"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-10T18:57:14.251143Z"},"epss":0.00358,"epssPercentile":0.2968,"scores":{"nvd":7.5,"vendor":6.5,"adp":7.5},"ingestedAt":"2026-09-09T01:17:17.507Z","slug":"CVE-2026-87431","body":"## Overview\n\nMissing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87431.json)","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":202167,"id":"CVE-2026-87431","ts":1789400064905,"field":"cvss","old":null,"new":"7.5"},{"seq":202166,"id":"CVE-2026-87431","ts":1789400064905,"field":"severity","old":"none","new":"high"},{"seq":200894,"id":"CVE-2026-87431","ts":1789397618357,"field":"cvss","old":"7.5","new":null},{"seq":200893,"id":"CVE-2026-87431","ts":1789397618357,"field":"severity","old":"high","new":"none"},{"seq":199587,"id":"CVE-2026-87431","ts":1789395559902,"field":"cvss","old":null,"new":"7.5"},{"seq":199586,"id":"CVE-2026-87431","ts":1789395559902,"field":"severity","old":"none","new":"high"},{"seq":198832,"id":"CVE-2026-87431","ts":1789392248310,"field":"cvss","old":"7.5","new":null},{"seq":198831,"id":"CVE-2026-87431","ts":1789392248310,"field":"severity","old":"high","new":"none"},{"seq":197165,"id":"CVE-2026-87431","ts":1789384295907,"field":"cvss","old":null,"new":"7.5"},{"seq":197164,"id":"CVE-2026-87431","ts":1789384295907,"field":"severity","old":"none","new":"high"},{"seq":196439,"id":"CVE-2026-87431","ts":1789383757750,"field":"cvss","old":"7.5","new":null},{"seq":196438,"id":"CVE-2026-87431","ts":1789383757750,"field":"severity","old":"high","new":"none"},{"seq":195343,"id":"CVE-2026-87431","ts":1789380576707,"field":"cvss","old":null,"new":"7.5"},{"seq":195342,"id":"CVE-2026-87431","ts":1789380576707,"field":"severity","old":"none","new":"high"},{"seq":194294,"id":"CVE-2026-87431","ts":1789378785001,"field":"cvss","old":"7.5","new":null},{"seq":194293,"id":"CVE-2026-87431","ts":1789378785001,"field":"severity","old":"high","new":"none"},{"seq":193081,"id":"CVE-2026-87431","ts":1789376519821,"field":"cvss","old":null,"new":"7.5"},{"seq":193080,"id":"CVE-2026-87431","ts":1789376519821,"field":"severity","old":"none","new":"high"},{"seq":191868,"id":"CVE-2026-87431","ts":1789373633251,"field":"cvss","old":"7.5","new":null},{"seq":191867,"id":"CVE-2026-87431","ts":1789373633251,"field":"severity","old":"high","new":"none"},{"seq":190653,"id":"CVE-2026-87431","ts":1789369486350,"field":"cvss","old":null,"new":"7.5"},{"seq":190652,"id":"CVE-2026-87431","ts":1789369486350,"field":"severity","old":"none","new":"high"},{"seq":189440,"id":"CVE-2026-87431","ts":1789368449567,"field":"cvss","old":"7.5","new":null},{"seq":189439,"id":"CVE-2026-87431","ts":1789368449567,"field":"severity","old":"high","new":"none"},{"seq":188223,"id":"CVE-2026-87431","ts":1789365235801,"field":"cvss","old":null,"new":"7.5"},{"seq":188222,"id":"CVE-2026-87431","ts":1789365235801,"field":"severity","old":"none","new":"high"},{"seq":187010,"id":"CVE-2026-87431","ts":1789363473061,"field":"cvss","old":"7.5","new":null},{"seq":187009,"id":"CVE-2026-87431","ts":1789363473061,"field":"severity","old":"high","new":"none"},{"seq":185796,"id":"CVE-2026-87431","ts":1789361234435,"field":"cvss","old":null,"new":"7.5"},{"seq":185795,"id":"CVE-2026-87431","ts":1789361234435,"field":"severity","old":"none","new":"high"},{"seq":184583,"id":"CVE-2026-87431","ts":1789358366095,"field":"cvss","old":"7.5","new":null},{"seq":184582,"id":"CVE-2026-87431","ts":1789358366095,"field":"severity","old":"high","new":"none"},{"seq":182833,"id":"CVE-2026-87431","ts":1789354322167,"field":"cvss","old":null,"new":"7.5"},{"seq":182832,"id":"CVE-2026-87431","ts":1789354322167,"field":"severity","old":"none","new":"high"},{"seq":181626,"id":"CVE-2026-87431","ts":1789353324141,"field":"cvss","old":"7.5","new":null},{"seq":181625,"id":"CVE-2026-87431","ts":1789353324141,"field":"severity","old":"high","new":"none"},{"seq":180419,"id":"CVE-2026-87431","ts":1789350289763,"field":"cvss","old":null,"new":"7.5"},{"seq":180418,"id":"CVE-2026-87431","ts":1789350289763,"field":"severity","old":"none","new":"high"},{"seq":179212,"id":"CVE-2026-87431","ts":1789348295256,"field":"cvss","old":"7.5","new":null},{"seq":179211,"id":"CVE-2026-87431","ts":1789348295256,"field":"severity","old":"high","new":"none"},{"seq":178005,"id":"CVE-2026-87431","ts":1789346376816,"field":"cvss","old":null,"new":"7.5"},{"seq":178004,"id":"CVE-2026-87431","ts":1789346376816,"field":"severity","old":"none","new":"high"},{"seq":176798,"id":"CVE-2026-87431","ts":1789343186413,"field":"cvss","old":"7.5","new":null},{"seq":176797,"id":"CVE-2026-87431","ts":1789343186413,"field":"severity","old":"high","new":"none"},{"seq":174915,"id":"CVE-2026-87431","ts":1789334883323,"field":"cvss","old":null,"new":"7.5"},{"seq":174914,"id":"CVE-2026-87431","ts":1789334883323,"field":"severity","old":"none","new":"high"},{"seq":173710,"id":"CVE-2026-87431","ts":1789333702542,"field":"cvss","old":"7.5","new":null},{"seq":173709,"id":"CVE-2026-87431","ts":1789333702542,"field":"severity","old":"high","new":"none"},{"seq":172524,"id":"CVE-2026-87431","ts":1789331095791,"field":"cvss","old":null,"new":"7.5"},{"seq":172523,"id":"CVE-2026-87431","ts":1789331095791,"field":"severity","old":"none","new":"high"}]}