{"id":"CVE-2026-87442","title":"Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass web origin policy via a crafted HTML page","summary":"Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)","severity":"low","cvss":3.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-441"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T19:19:20.910","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87442","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/497443419","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"epss":0.00269,"epssPercentile":0.19294,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T17:09:47.751443Z"},"ingestedAt":"2026-09-09T01:17:17.511Z","slug":"CVE-2026-87442","body":"## Overview\n\nConfused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"sunlit","depthScore":17,"depthScoreParts":{"impact":17.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":202189,"id":"CVE-2026-87442","ts":1789400064990,"field":"cvss","old":null,"new":"3.1"},{"seq":202188,"id":"CVE-2026-87442","ts":1789400064990,"field":"severity","old":"none","new":"low"},{"seq":200916,"id":"CVE-2026-87442","ts":1789397618515,"field":"cvss","old":"3.1","new":null},{"seq":200915,"id":"CVE-2026-87442","ts":1789397618515,"field":"severity","old":"low","new":"none"},{"seq":199609,"id":"CVE-2026-87442","ts":1789395561627,"field":"cvss","old":null,"new":"3.1"},{"seq":199608,"id":"CVE-2026-87442","ts":1789395561627,"field":"severity","old":"none","new":"low"},{"seq":198854,"id":"CVE-2026-87442","ts":1789392250002,"field":"cvss","old":"3.1","new":null},{"seq":198853,"id":"CVE-2026-87442","ts":1789392250002,"field":"severity","old":"low","new":"none"},{"seq":197187,"id":"CVE-2026-87442","ts":1789384295976,"field":"cvss","old":null,"new":"3.1"},{"seq":197186,"id":"CVE-2026-87442","ts":1789384295976,"field":"severity","old":"none","new":"low"},{"seq":196461,"id":"CVE-2026-87442","ts":1789383757825,"field":"cvss","old":"3.1","new":null},{"seq":196460,"id":"CVE-2026-87442","ts":1789383757825,"field":"severity","old":"low","new":"none"},{"seq":195365,"id":"CVE-2026-87442","ts":1789380576784,"field":"cvss","old":null,"new":"3.1"},{"seq":195364,"id":"CVE-2026-87442","ts":1789380576784,"field":"severity","old":"none","new":"low"},{"seq":194316,"id":"CVE-2026-87442","ts":1789378785160,"field":"cvss","old":"3.1","new":null},{"seq":194315,"id":"CVE-2026-87442","ts":1789378785160,"field":"severity","old":"low","new":"none"},{"seq":193103,"id":"CVE-2026-87442","ts":1789376519899,"field":"cvss","old":null,"new":"3.1"},{"seq":193102,"id":"CVE-2026-87442","ts":1789376519899,"field":"severity","old":"none","new":"low"},{"seq":191890,"id":"CVE-2026-87442","ts":1789373633405,"field":"cvss","old":"3.1","new":null},{"seq":191889,"id":"CVE-2026-87442","ts":1789373633405,"field":"severity","old":"low","new":"none"},{"seq":190675,"id":"CVE-2026-87442","ts":1789369486442,"field":"cvss","old":null,"new":"3.1"},{"seq":190674,"id":"CVE-2026-87442","ts":1789369486442,"field":"severity","old":"none","new":"low"},{"seq":189462,"id":"CVE-2026-87442","ts":1789368451105,"field":"cvss","old":"3.1","new":null},{"seq":189461,"id":"CVE-2026-87442","ts":1789368451105,"field":"severity","old":"low","new":"none"},{"seq":188245,"id":"CVE-2026-87442","ts":1789365235879,"field":"cvss","old":null,"new":"3.1"},{"seq":188244,"id":"CVE-2026-87442","ts":1789365235879,"field":"severity","old":"none","new":"low"},{"seq":187032,"id":"CVE-2026-87442","ts":1789363473215,"field":"cvss","old":"3.1","new":null},{"seq":187031,"id":"CVE-2026-87442","ts":1789363473215,"field":"severity","old":"low","new":"none"},{"seq":185818,"id":"CVE-2026-87442","ts":1789361234510,"field":"cvss","old":null,"new":"3.1"},{"seq":185817,"id":"CVE-2026-87442","ts":1789361234510,"field":"severity","old":"none","new":"low"},{"seq":184605,"id":"CVE-2026-87442","ts":1789358366521,"field":"cvss","old":"3.1","new":null},{"seq":184604,"id":"CVE-2026-87442","ts":1789358366521,"field":"severity","old":"low","new":"none"},{"seq":182855,"id":"CVE-2026-87442","ts":1789354322253,"field":"cvss","old":null,"new":"3.1"},{"seq":182854,"id":"CVE-2026-87442","ts":1789354322253,"field":"severity","old":"none","new":"low"},{"seq":181648,"id":"CVE-2026-87442","ts":1789353325609,"field":"cvss","old":"3.1","new":null},{"seq":181647,"id":"CVE-2026-87442","ts":1789353325609,"field":"severity","old":"low","new":"none"},{"seq":180441,"id":"CVE-2026-87442","ts":1789350289837,"field":"cvss","old":null,"new":"3.1"},{"seq":180440,"id":"CVE-2026-87442","ts":1789350289837,"field":"severity","old":"none","new":"low"},{"seq":179234,"id":"CVE-2026-87442","ts":1789348297002,"field":"cvss","old":"3.1","new":null},{"seq":179233,"id":"CVE-2026-87442","ts":1789348297002,"field":"severity","old":"low","new":"none"},{"seq":178027,"id":"CVE-2026-87442","ts":1789346376890,"field":"cvss","old":null,"new":"3.1"},{"seq":178026,"id":"CVE-2026-87442","ts":1789346376890,"field":"severity","old":"none","new":"low"},{"seq":176820,"id":"CVE-2026-87442","ts":1789343186570,"field":"cvss","old":"3.1","new":null},{"seq":176819,"id":"CVE-2026-87442","ts":1789343186570,"field":"severity","old":"low","new":"none"},{"seq":174937,"id":"CVE-2026-87442","ts":1789334883409,"field":"cvss","old":null,"new":"3.1"},{"seq":174936,"id":"CVE-2026-87442","ts":1789334883409,"field":"severity","old":"none","new":"low"},{"seq":173732,"id":"CVE-2026-87442","ts":1789333702625,"field":"cvss","old":"3.1","new":null},{"seq":173731,"id":"CVE-2026-87442","ts":1789333702625,"field":"severity","old":"low","new":"none"},{"seq":172546,"id":"CVE-2026-87442","ts":1789331095864,"field":"cvss","old":null,"new":"3.1"},{"seq":172545,"id":"CVE-2026-87442","ts":1789331095864,"field":"severity","old":"none","new":"low"}]}