{"id":"CVE-2026-87437","title":"Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page","summary":"Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-200"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-09","sourceUpdated":"2026-09-09T16:36:22.597","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87437","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/540082621","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T15:04:11.400894Z"},"epss":0.00291,"epssPercentile":0.2189,"ingestedAt":"2026-09-09T01:17:17.505Z","slug":"CVE-2026-87437","body":"## Overview\n\nInformation leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":202179,"id":"CVE-2026-87437","ts":1789400064952,"field":"cvss","old":null,"new":"6.5"},{"seq":202178,"id":"CVE-2026-87437","ts":1789400064952,"field":"severity","old":"none","new":"medium"},{"seq":200906,"id":"CVE-2026-87437","ts":1789397618443,"field":"cvss","old":"6.5","new":null},{"seq":200905,"id":"CVE-2026-87437","ts":1789397618443,"field":"severity","old":"medium","new":"none"},{"seq":199599,"id":"CVE-2026-87437","ts":1789395560842,"field":"cvss","old":null,"new":"6.5"},{"seq":199598,"id":"CVE-2026-87437","ts":1789395560842,"field":"severity","old":"none","new":"medium"},{"seq":198844,"id":"CVE-2026-87437","ts":1789392249238,"field":"cvss","old":"6.5","new":null},{"seq":198843,"id":"CVE-2026-87437","ts":1789392249238,"field":"severity","old":"medium","new":"none"},{"seq":197177,"id":"CVE-2026-87437","ts":1789384295945,"field":"cvss","old":null,"new":"6.5"},{"seq":197176,"id":"CVE-2026-87437","ts":1789384295945,"field":"severity","old":"none","new":"medium"},{"seq":196451,"id":"CVE-2026-87437","ts":1789383757791,"field":"cvss","old":"6.5","new":null},{"seq":196450,"id":"CVE-2026-87437","ts":1789383757791,"field":"severity","old":"medium","new":"none"},{"seq":195355,"id":"CVE-2026-87437","ts":1789380576750,"field":"cvss","old":null,"new":"6.5"},{"seq":195354,"id":"CVE-2026-87437","ts":1789380576750,"field":"severity","old":"none","new":"medium"},{"seq":194306,"id":"CVE-2026-87437","ts":1789378785089,"field":"cvss","old":"6.5","new":null},{"seq":194305,"id":"CVE-2026-87437","ts":1789378785089,"field":"severity","old":"medium","new":"none"},{"seq":193093,"id":"CVE-2026-87437","ts":1789376519864,"field":"cvss","old":null,"new":"6.5"},{"seq":193092,"id":"CVE-2026-87437","ts":1789376519864,"field":"severity","old":"none","new":"medium"},{"seq":191880,"id":"CVE-2026-87437","ts":1789373633336,"field":"cvss","old":"6.5","new":null},{"seq":191879,"id":"CVE-2026-87437","ts":1789373633336,"field":"severity","old":"medium","new":"none"},{"seq":190665,"id":"CVE-2026-87437","ts":1789369486401,"field":"cvss","old":null,"new":"6.5"},{"seq":190664,"id":"CVE-2026-87437","ts":1789369486401,"field":"severity","old":"none","new":"medium"},{"seq":189452,"id":"CVE-2026-87437","ts":1789368450407,"field":"cvss","old":"6.5","new":null},{"seq":189451,"id":"CVE-2026-87437","ts":1789368450407,"field":"severity","old":"medium","new":"none"},{"seq":188235,"id":"CVE-2026-87437","ts":1789365235842,"field":"cvss","old":null,"new":"6.5"},{"seq":188234,"id":"CVE-2026-87437","ts":1789365235842,"field":"severity","old":"none","new":"medium"},{"seq":187022,"id":"CVE-2026-87437","ts":1789363473146,"field":"cvss","old":"6.5","new":null},{"seq":187021,"id":"CVE-2026-87437","ts":1789363473146,"field":"severity","old":"medium","new":"none"},{"seq":185808,"id":"CVE-2026-87437","ts":1789361234476,"field":"cvss","old":null,"new":"6.5"},{"seq":185807,"id":"CVE-2026-87437","ts":1789361234476,"field":"severity","old":"none","new":"medium"},{"seq":184595,"id":"CVE-2026-87437","ts":1789358366324,"field":"cvss","old":"6.5","new":null},{"seq":184594,"id":"CVE-2026-87437","ts":1789358366324,"field":"severity","old":"medium","new":"none"},{"seq":182845,"id":"CVE-2026-87437","ts":1789354322213,"field":"cvss","old":null,"new":"6.5"},{"seq":182844,"id":"CVE-2026-87437","ts":1789354322213,"field":"severity","old":"none","new":"medium"},{"seq":181638,"id":"CVE-2026-87437","ts":1789353324940,"field":"cvss","old":"6.5","new":null},{"seq":181637,"id":"CVE-2026-87437","ts":1789353324940,"field":"severity","old":"medium","new":"none"},{"seq":180431,"id":"CVE-2026-87437","ts":1789350289804,"field":"cvss","old":null,"new":"6.5"},{"seq":180430,"id":"CVE-2026-87437","ts":1789350289804,"field":"severity","old":"none","new":"medium"},{"seq":179224,"id":"CVE-2026-87437","ts":1789348296216,"field":"cvss","old":"6.5","new":null},{"seq":179223,"id":"CVE-2026-87437","ts":1789348296216,"field":"severity","old":"medium","new":"none"},{"seq":178017,"id":"CVE-2026-87437","ts":1789346376857,"field":"cvss","old":null,"new":"6.5"},{"seq":178016,"id":"CVE-2026-87437","ts":1789346376857,"field":"severity","old":"none","new":"medium"},{"seq":176810,"id":"CVE-2026-87437","ts":1789343186499,"field":"cvss","old":"6.5","new":null},{"seq":176809,"id":"CVE-2026-87437","ts":1789343186499,"field":"severity","old":"medium","new":"none"},{"seq":174927,"id":"CVE-2026-87437","ts":1789334883371,"field":"cvss","old":null,"new":"6.5"},{"seq":174926,"id":"CVE-2026-87437","ts":1789334883371,"field":"severity","old":"none","new":"medium"},{"seq":173722,"id":"CVE-2026-87437","ts":1789333702587,"field":"cvss","old":"6.5","new":null},{"seq":173721,"id":"CVE-2026-87437","ts":1789333702587,"field":"severity","old":"medium","new":"none"},{"seq":172536,"id":"CVE-2026-87437","ts":1789331095831,"field":"cvss","old":null,"new":"6.5"},{"seq":172535,"id":"CVE-2026-87437","ts":1789331095831,"field":"severity","old":"none","new":"medium"}]}