{"id":"CVE-2026-87477","title":"Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page","summary":"Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-200"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-09","sourceUpdated":"2026-09-09T17:15:26.053","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87477","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/540059211","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T15:04:12.818594Z"},"epss":0.00291,"epssPercentile":0.21844,"ingestedAt":"2026-09-09T01:17:17.505Z","slug":"CVE-2026-87477","body":"## Overview\n\nInformation leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":202259,"id":"CVE-2026-87477","ts":1789400065262,"field":"cvss","old":null,"new":"6.5"},{"seq":202258,"id":"CVE-2026-87477","ts":1789400065262,"field":"severity","old":"none","new":"medium"},{"seq":200986,"id":"CVE-2026-87477","ts":1789397619017,"field":"cvss","old":"6.5","new":null},{"seq":200985,"id":"CVE-2026-87477","ts":1789397619017,"field":"severity","old":"medium","new":"none"},{"seq":199679,"id":"CVE-2026-87477","ts":1789395567127,"field":"cvss","old":null,"new":"6.5"},{"seq":199678,"id":"CVE-2026-87477","ts":1789395567127,"field":"severity","old":"none","new":"medium"},{"seq":198920,"id":"CVE-2026-87477","ts":1789392255305,"field":"cvss","old":"6.5","new":null},{"seq":198919,"id":"CVE-2026-87477","ts":1789392255305,"field":"severity","old":"medium","new":"none"},{"seq":197253,"id":"CVE-2026-87477","ts":1789384296197,"field":"cvss","old":null,"new":"6.5"},{"seq":197252,"id":"CVE-2026-87477","ts":1789384296197,"field":"severity","old":"none","new":"medium"},{"seq":196527,"id":"CVE-2026-87477","ts":1789383759953,"field":"cvss","old":"6.5","new":null},{"seq":196526,"id":"CVE-2026-87477","ts":1789383759953,"field":"severity","old":"medium","new":"none"},{"seq":195431,"id":"CVE-2026-87477","ts":1789380577036,"field":"cvss","old":null,"new":"6.5"},{"seq":195430,"id":"CVE-2026-87477","ts":1789380577036,"field":"severity","old":"none","new":"medium"},{"seq":194382,"id":"CVE-2026-87477","ts":1789378785649,"field":"cvss","old":"6.5","new":null},{"seq":194381,"id":"CVE-2026-87477","ts":1789378785649,"field":"severity","old":"medium","new":"none"},{"seq":193169,"id":"CVE-2026-87477","ts":1789376520153,"field":"cvss","old":null,"new":"6.5"},{"seq":193168,"id":"CVE-2026-87477","ts":1789376520153,"field":"severity","old":"none","new":"medium"},{"seq":191956,"id":"CVE-2026-87477","ts":1789373634046,"field":"cvss","old":"6.5","new":null},{"seq":191955,"id":"CVE-2026-87477","ts":1789373634046,"field":"severity","old":"medium","new":"none"},{"seq":190741,"id":"CVE-2026-87477","ts":1789369486955,"field":"cvss","old":null,"new":"6.5"},{"seq":190740,"id":"CVE-2026-87477","ts":1789369486955,"field":"severity","old":"none","new":"medium"},{"seq":189528,"id":"CVE-2026-87477","ts":1789368455976,"field":"cvss","old":"6.5","new":null},{"seq":189527,"id":"CVE-2026-87477","ts":1789368455976,"field":"severity","old":"medium","new":"none"},{"seq":188311,"id":"CVE-2026-87477","ts":1789365236122,"field":"cvss","old":null,"new":"6.5"},{"seq":188310,"id":"CVE-2026-87477","ts":1789365236122,"field":"severity","old":"none","new":"medium"},{"seq":187098,"id":"CVE-2026-87477","ts":1789363475557,"field":"cvss","old":"6.5","new":null},{"seq":187097,"id":"CVE-2026-87477","ts":1789363475557,"field":"severity","old":"medium","new":"none"},{"seq":185884,"id":"CVE-2026-87477","ts":1789361234745,"field":"cvss","old":null,"new":"6.5"},{"seq":185883,"id":"CVE-2026-87477","ts":1789361234745,"field":"severity","old":"none","new":"medium"},{"seq":184671,"id":"CVE-2026-87477","ts":1789358372199,"field":"cvss","old":"6.5","new":null},{"seq":184670,"id":"CVE-2026-87477","ts":1789358372199,"field":"severity","old":"medium","new":"none"},{"seq":182921,"id":"CVE-2026-87477","ts":1789354322530,"field":"cvss","old":null,"new":"6.5"},{"seq":182920,"id":"CVE-2026-87477","ts":1789354322530,"field":"severity","old":"none","new":"medium"},{"seq":181714,"id":"CVE-2026-87477","ts":1789353330255,"field":"cvss","old":"6.5","new":null},{"seq":181713,"id":"CVE-2026-87477","ts":1789353330255,"field":"severity","old":"medium","new":"none"},{"seq":180507,"id":"CVE-2026-87477","ts":1789350290072,"field":"cvss","old":null,"new":"6.5"},{"seq":180506,"id":"CVE-2026-87477","ts":1789350290072,"field":"severity","old":"none","new":"medium"},{"seq":179300,"id":"CVE-2026-87477","ts":1789348302545,"field":"cvss","old":"6.5","new":null},{"seq":179299,"id":"CVE-2026-87477","ts":1789348302545,"field":"severity","old":"medium","new":"none"},{"seq":178093,"id":"CVE-2026-87477","ts":1789346377128,"field":"cvss","old":null,"new":"6.5"},{"seq":178092,"id":"CVE-2026-87477","ts":1789346377128,"field":"severity","old":"none","new":"medium"},{"seq":176886,"id":"CVE-2026-87477","ts":1789343187056,"field":"cvss","old":"6.5","new":null},{"seq":176885,"id":"CVE-2026-87477","ts":1789343187056,"field":"severity","old":"medium","new":"none"},{"seq":175003,"id":"CVE-2026-87477","ts":1789334883684,"field":"cvss","old":null,"new":"6.5"},{"seq":175002,"id":"CVE-2026-87477","ts":1789334883684,"field":"severity","old":"none","new":"medium"},{"seq":173798,"id":"CVE-2026-87477","ts":1789333702878,"field":"cvss","old":"6.5","new":null},{"seq":173797,"id":"CVE-2026-87477","ts":1789333702878,"field":"severity","old":"medium","new":"none"},{"seq":172612,"id":"CVE-2026-87477","ts":1789331096107,"field":"cvss","old":null,"new":"6.5"},{"seq":172611,"id":"CVE-2026-87477","ts":1789331096107,"field":"severity","old":"none","new":"medium"}]}