{"id":"CVE-2026-87517","title":"Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page","summary":"Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)","severity":"low","cvss":3.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-367"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-09","sourceUpdated":"2026-09-09T19:15:42.050","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87517","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/517581661","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T17:23:47.864288Z"},"epss":0.00174,"epssPercentile":0.07154,"ingestedAt":"2026-09-09T01:17:17.513Z","slug":"CVE-2026-87517","body":"## Overview\n\nRace condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"sunlit","depthScore":17,"depthScoreParts":{"impact":17.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202344,"id":"CVE-2026-87517","ts":1789400066098,"field":"cvss","old":null,"new":"3.1"},{"seq":202343,"id":"CVE-2026-87517","ts":1789400066098,"field":"severity","old":"none","new":"low"},{"seq":201071,"id":"CVE-2026-87517","ts":1789397619763,"field":"cvss","old":"3.1","new":null},{"seq":201070,"id":"CVE-2026-87517","ts":1789397619763,"field":"severity","old":"low","new":"none"},{"seq":199764,"id":"CVE-2026-87517","ts":1789395573384,"field":"cvss","old":null,"new":"3.1"},{"seq":199763,"id":"CVE-2026-87517","ts":1789395573384,"field":"severity","old":"none","new":"low"},{"seq":199005,"id":"CVE-2026-87517","ts":1789392259905,"field":"cvss","old":"3.1","new":null},{"seq":199004,"id":"CVE-2026-87517","ts":1789392259905,"field":"severity","old":"low","new":"none"},{"seq":197338,"id":"CVE-2026-87517","ts":1789384296449,"field":"cvss","old":null,"new":"3.1"},{"seq":197337,"id":"CVE-2026-87517","ts":1789384296449,"field":"severity","old":"none","new":"low"},{"seq":196612,"id":"CVE-2026-87517","ts":1789383765205,"field":"cvss","old":"3.1","new":null},{"seq":196611,"id":"CVE-2026-87517","ts":1789383765205,"field":"severity","old":"low","new":"none"},{"seq":195516,"id":"CVE-2026-87517","ts":1789380577313,"field":"cvss","old":null,"new":"3.1"},{"seq":195515,"id":"CVE-2026-87517","ts":1789380577313,"field":"severity","old":"none","new":"low"},{"seq":194467,"id":"CVE-2026-87517","ts":1789378789040,"field":"cvss","old":"3.1","new":null},{"seq":194466,"id":"CVE-2026-87517","ts":1789378789040,"field":"severity","old":"low","new":"none"},{"seq":193254,"id":"CVE-2026-87517","ts":1789376520447,"field":"cvss","old":null,"new":"3.1"},{"seq":193253,"id":"CVE-2026-87517","ts":1789376520447,"field":"severity","old":"none","new":"low"},{"seq":192041,"id":"CVE-2026-87517","ts":1789373638812,"field":"cvss","old":"3.1","new":null},{"seq":192040,"id":"CVE-2026-87517","ts":1789373638812,"field":"severity","old":"low","new":"none"},{"seq":190826,"id":"CVE-2026-87517","ts":1789369487287,"field":"cvss","old":null,"new":"3.1"},{"seq":190825,"id":"CVE-2026-87517","ts":1789369487287,"field":"severity","old":"none","new":"low"},{"seq":189613,"id":"CVE-2026-87517","ts":1789368460390,"field":"cvss","old":"3.1","new":null},{"seq":189612,"id":"CVE-2026-87517","ts":1789368460390,"field":"severity","old":"low","new":"none"},{"seq":188396,"id":"CVE-2026-87517","ts":1789365236389,"field":"cvss","old":null,"new":"3.1"},{"seq":188395,"id":"CVE-2026-87517","ts":1789365236389,"field":"severity","old":"none","new":"low"},{"seq":187183,"id":"CVE-2026-87517","ts":1789363479769,"field":"cvss","old":"3.1","new":null},{"seq":187182,"id":"CVE-2026-87517","ts":1789363479769,"field":"severity","old":"low","new":"none"},{"seq":185969,"id":"CVE-2026-87517","ts":1789361235018,"field":"cvss","old":null,"new":"3.1"},{"seq":185968,"id":"CVE-2026-87517","ts":1789361235018,"field":"severity","old":"none","new":"low"},{"seq":184756,"id":"CVE-2026-87517","ts":1789358376733,"field":"cvss","old":"3.1","new":null},{"seq":184755,"id":"CVE-2026-87517","ts":1789358376733,"field":"severity","old":"low","new":"none"},{"seq":183005,"id":"CVE-2026-87517","ts":1789354322847,"field":"cvss","old":null,"new":"3.1"},{"seq":183004,"id":"CVE-2026-87517","ts":1789354322847,"field":"severity","old":"none","new":"low"},{"seq":181798,"id":"CVE-2026-87517","ts":1789353334744,"field":"cvss","old":"3.1","new":null},{"seq":181797,"id":"CVE-2026-87517","ts":1789353334744,"field":"severity","old":"low","new":"none"},{"seq":180591,"id":"CVE-2026-87517","ts":1789350290361,"field":"cvss","old":null,"new":"3.1"},{"seq":180590,"id":"CVE-2026-87517","ts":1789350290361,"field":"severity","old":"none","new":"low"},{"seq":179384,"id":"CVE-2026-87517","ts":1789348308042,"field":"cvss","old":"3.1","new":null},{"seq":179383,"id":"CVE-2026-87517","ts":1789348308042,"field":"severity","old":"low","new":"none"},{"seq":178177,"id":"CVE-2026-87517","ts":1789346377395,"field":"cvss","old":null,"new":"3.1"},{"seq":178176,"id":"CVE-2026-87517","ts":1789346377395,"field":"severity","old":"none","new":"low"},{"seq":176970,"id":"CVE-2026-87517","ts":1789343187954,"field":"cvss","old":"3.1","new":null},{"seq":176969,"id":"CVE-2026-87517","ts":1789343187954,"field":"severity","old":"low","new":"none"},{"seq":175087,"id":"CVE-2026-87517","ts":1789334883997,"field":"cvss","old":null,"new":"3.1"},{"seq":175086,"id":"CVE-2026-87517","ts":1789334883997,"field":"severity","old":"none","new":"low"},{"seq":173882,"id":"CVE-2026-87517","ts":1789333703154,"field":"cvss","old":"3.1","new":null},{"seq":173881,"id":"CVE-2026-87517","ts":1789333703154,"field":"severity","old":"low","new":"none"},{"seq":172696,"id":"CVE-2026-87517","ts":1789331096385,"field":"cvss","old":null,"new":"3.1"},{"seq":172695,"id":"CVE-2026-87517","ts":1789331096385,"field":"severity","old":"none","new":"low"}]}