{"id":"CVE-2026-87496","title":"UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page","summary":"UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-451"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T19:20:47.050","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87496","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/514074827","label":"chrome-cve-admin@google.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87496.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-87496"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87496"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"epss":0.00223,"epssPercentile":0.13172,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T19:39:14.374682Z"},"ingestedAt":"2026-09-09T01:17:17.509Z","slug":"CVE-2026-87496","body":"## Overview\n\nUI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87496.json)","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202302,"id":"CVE-2026-87496","ts":1789400065408,"field":"cvss","old":null,"new":"5.4"},{"seq":202301,"id":"CVE-2026-87496","ts":1789400065408,"field":"severity","old":"none","new":"medium"},{"seq":201029,"id":"CVE-2026-87496","ts":1789397619291,"field":"cvss","old":"5.4","new":null},{"seq":201028,"id":"CVE-2026-87496","ts":1789397619291,"field":"severity","old":"medium","new":"none"},{"seq":199722,"id":"CVE-2026-87496","ts":1789395570107,"field":"cvss","old":null,"new":"5.4"},{"seq":199721,"id":"CVE-2026-87496","ts":1789395570107,"field":"severity","old":"none","new":"medium"},{"seq":198963,"id":"CVE-2026-87496","ts":1789392258185,"field":"cvss","old":"5.4","new":null},{"seq":198962,"id":"CVE-2026-87496","ts":1789392258185,"field":"severity","old":"medium","new":"none"},{"seq":197296,"id":"CVE-2026-87496","ts":1789384296317,"field":"cvss","old":null,"new":"5.4"},{"seq":197295,"id":"CVE-2026-87496","ts":1789384296317,"field":"severity","old":"none","new":"medium"},{"seq":196570,"id":"CVE-2026-87496","ts":1789383762458,"field":"cvss","old":"5.4","new":null},{"seq":196569,"id":"CVE-2026-87496","ts":1789383762458,"field":"severity","old":"medium","new":"none"},{"seq":195474,"id":"CVE-2026-87496","ts":1789380577169,"field":"cvss","old":null,"new":"5.4"},{"seq":195473,"id":"CVE-2026-87496","ts":1789380577169,"field":"severity","old":"none","new":"medium"},{"seq":194425,"id":"CVE-2026-87496","ts":1789378786001,"field":"cvss","old":"5.4","new":null},{"seq":194424,"id":"CVE-2026-87496","ts":1789378786001,"field":"severity","old":"medium","new":"none"},{"seq":193212,"id":"CVE-2026-87496","ts":1789376520292,"field":"cvss","old":null,"new":"5.4"},{"seq":193211,"id":"CVE-2026-87496","ts":1789376520292,"field":"severity","old":"none","new":"medium"},{"seq":191999,"id":"CVE-2026-87496","ts":1789373636699,"field":"cvss","old":"5.4","new":null},{"seq":191998,"id":"CVE-2026-87496","ts":1789373636699,"field":"severity","old":"medium","new":"none"},{"seq":190784,"id":"CVE-2026-87496","ts":1789369487116,"field":"cvss","old":null,"new":"5.4"},{"seq":190783,"id":"CVE-2026-87496","ts":1789369487116,"field":"severity","old":"none","new":"medium"},{"seq":189571,"id":"CVE-2026-87496","ts":1789368458633,"field":"cvss","old":"5.4","new":null},{"seq":189570,"id":"CVE-2026-87496","ts":1789368458633,"field":"severity","old":"medium","new":"none"},{"seq":188354,"id":"CVE-2026-87496","ts":1789365236249,"field":"cvss","old":null,"new":"5.4"},{"seq":188353,"id":"CVE-2026-87496","ts":1789365236249,"field":"severity","old":"none","new":"medium"},{"seq":187141,"id":"CVE-2026-87496","ts":1789363478116,"field":"cvss","old":"5.4","new":null},{"seq":187140,"id":"CVE-2026-87496","ts":1789363478116,"field":"severity","old":"medium","new":"none"},{"seq":185927,"id":"CVE-2026-87496","ts":1789361234873,"field":"cvss","old":null,"new":"5.4"},{"seq":185926,"id":"CVE-2026-87496","ts":1789361234873,"field":"severity","old":"none","new":"medium"},{"seq":184714,"id":"CVE-2026-87496","ts":1789358374952,"field":"cvss","old":"5.4","new":null},{"seq":184713,"id":"CVE-2026-87496","ts":1789358374952,"field":"severity","old":"medium","new":"none"},{"seq":182963,"id":"CVE-2026-87496","ts":1789354322682,"field":"cvss","old":null,"new":"5.4"},{"seq":182962,"id":"CVE-2026-87496","ts":1789354322682,"field":"severity","old":"none","new":"medium"},{"seq":181756,"id":"CVE-2026-87496","ts":1789353332764,"field":"cvss","old":"5.4","new":null},{"seq":181755,"id":"CVE-2026-87496","ts":1789353332764,"field":"severity","old":"medium","new":"none"},{"seq":180549,"id":"CVE-2026-87496","ts":1789350290212,"field":"cvss","old":null,"new":"5.4"},{"seq":180548,"id":"CVE-2026-87496","ts":1789350290212,"field":"severity","old":"none","new":"medium"},{"seq":179342,"id":"CVE-2026-87496","ts":1789348305551,"field":"cvss","old":"5.4","new":null},{"seq":179341,"id":"CVE-2026-87496","ts":1789348305551,"field":"severity","old":"medium","new":"none"},{"seq":178135,"id":"CVE-2026-87496","ts":1789346377255,"field":"cvss","old":null,"new":"5.4"},{"seq":178134,"id":"CVE-2026-87496","ts":1789346377255,"field":"severity","old":"none","new":"medium"},{"seq":176928,"id":"CVE-2026-87496","ts":1789343187320,"field":"cvss","old":"5.4","new":null},{"seq":176927,"id":"CVE-2026-87496","ts":1789343187320,"field":"severity","old":"medium","new":"none"},{"seq":175045,"id":"CVE-2026-87496","ts":1789334883833,"field":"cvss","old":null,"new":"5.4"},{"seq":175044,"id":"CVE-2026-87496","ts":1789334883833,"field":"severity","old":"none","new":"medium"},{"seq":173840,"id":"CVE-2026-87496","ts":1789333703009,"field":"cvss","old":"5.4","new":null},{"seq":173839,"id":"CVE-2026-87496","ts":1789333703009,"field":"severity","old":"medium","new":"none"},{"seq":172654,"id":"CVE-2026-87496","ts":1789331096241,"field":"cvss","old":null,"new":"5.4"},{"seq":172653,"id":"CVE-2026-87496","ts":1789331096241,"field":"severity","old":"none","new":"medium"}]}