{"id":"CVE-2026-87534","title":"Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic","summary":"Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity:…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-862"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T19:17:38.190","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87534","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/513134173","label":"chrome-cve-admin@google.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87534.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-87534"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87534"}],"tags":["nvd","cve.org","csaf","vex","red-hat","score-dispute"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T18:16:46.242252Z"},"scores":{"nvd":9.8,"adp":6.5,"vendor":5.4},"epss":0.00214,"epssPercentile":0.11976,"ingestedAt":"2026-09-09T01:17:17.509Z","slug":"CVE-2026-87534","body":"## Overview\n\nMissing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87534.json)","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202378,"id":"CVE-2026-87534","ts":1789400069151,"field":"cvss","old":null,"new":"9.8"},{"seq":202377,"id":"CVE-2026-87534","ts":1789400069151,"field":"severity","old":"none","new":"critical"},{"seq":201105,"id":"CVE-2026-87534","ts":1789397619905,"field":"cvss","old":"9.8","new":null},{"seq":201104,"id":"CVE-2026-87534","ts":1789397619905,"field":"severity","old":"critical","new":"none"},{"seq":199798,"id":"CVE-2026-87534","ts":1789395576038,"field":"cvss","old":null,"new":"9.8"},{"seq":199797,"id":"CVE-2026-87534","ts":1789395576038,"field":"severity","old":"none","new":"critical"},{"seq":199039,"id":"CVE-2026-87534","ts":1789392260022,"field":"cvss","old":"9.8","new":null},{"seq":199038,"id":"CVE-2026-87534","ts":1789392260022,"field":"severity","old":"critical","new":"none"},{"seq":197372,"id":"CVE-2026-87534","ts":1789384296558,"field":"cvss","old":null,"new":"9.8"},{"seq":197371,"id":"CVE-2026-87534","ts":1789384296558,"field":"severity","old":"none","new":"critical"},{"seq":196646,"id":"CVE-2026-87534","ts":1789383767458,"field":"cvss","old":"9.8","new":null},{"seq":196645,"id":"CVE-2026-87534","ts":1789383767458,"field":"severity","old":"critical","new":"none"},{"seq":195550,"id":"CVE-2026-87534","ts":1789380577433,"field":"cvss","old":null,"new":"9.8"},{"seq":195549,"id":"CVE-2026-87534","ts":1789380577433,"field":"severity","old":"none","new":"critical"},{"seq":194501,"id":"CVE-2026-87534","ts":1789378789165,"field":"cvss","old":"9.8","new":null},{"seq":194500,"id":"CVE-2026-87534","ts":1789378789165,"field":"severity","old":"critical","new":"none"},{"seq":193288,"id":"CVE-2026-87534","ts":1789376520571,"field":"cvss","old":null,"new":"9.8"},{"seq":193287,"id":"CVE-2026-87534","ts":1789376520571,"field":"severity","old":"none","new":"critical"},{"seq":192075,"id":"CVE-2026-87534","ts":1789373638933,"field":"cvss","old":"9.8","new":null},{"seq":192074,"id":"CVE-2026-87534","ts":1789373638933,"field":"severity","old":"critical","new":"none"},{"seq":190860,"id":"CVE-2026-87534","ts":1789369487425,"field":"cvss","old":null,"new":"9.8"},{"seq":190859,"id":"CVE-2026-87534","ts":1789369487425,"field":"severity","old":"none","new":"critical"},{"seq":189647,"id":"CVE-2026-87534","ts":1789368460532,"field":"cvss","old":"9.8","new":null},{"seq":189646,"id":"CVE-2026-87534","ts":1789368460532,"field":"severity","old":"critical","new":"none"},{"seq":188430,"id":"CVE-2026-87534","ts":1789365236504,"field":"cvss","old":null,"new":"9.8"},{"seq":188429,"id":"CVE-2026-87534","ts":1789365236504,"field":"severity","old":"none","new":"critical"},{"seq":187217,"id":"CVE-2026-87534","ts":1789363479884,"field":"cvss","old":"9.8","new":null},{"seq":187216,"id":"CVE-2026-87534","ts":1789363479884,"field":"severity","old":"critical","new":"none"},{"seq":186003,"id":"CVE-2026-87534","ts":1789361235137,"field":"cvss","old":null,"new":"9.8"},{"seq":186002,"id":"CVE-2026-87534","ts":1789361235137,"field":"severity","old":"none","new":"critical"},{"seq":184790,"id":"CVE-2026-87534","ts":1789358376882,"field":"cvss","old":"9.8","new":null},{"seq":184789,"id":"CVE-2026-87534","ts":1789358376882,"field":"severity","old":"critical","new":"none"},{"seq":183039,"id":"CVE-2026-87534","ts":1789354322981,"field":"cvss","old":null,"new":"9.8"},{"seq":183038,"id":"CVE-2026-87534","ts":1789354322981,"field":"severity","old":"none","new":"critical"},{"seq":181832,"id":"CVE-2026-87534","ts":1789353334860,"field":"cvss","old":"9.8","new":null},{"seq":181831,"id":"CVE-2026-87534","ts":1789353334860,"field":"severity","old":"critical","new":"none"},{"seq":180625,"id":"CVE-2026-87534","ts":1789350290477,"field":"cvss","old":null,"new":"9.8"},{"seq":180624,"id":"CVE-2026-87534","ts":1789350290477,"field":"severity","old":"none","new":"critical"},{"seq":179418,"id":"CVE-2026-87534","ts":1789348308155,"field":"cvss","old":"9.8","new":null},{"seq":179417,"id":"CVE-2026-87534","ts":1789348308155,"field":"severity","old":"critical","new":"none"},{"seq":178211,"id":"CVE-2026-87534","ts":1789346377510,"field":"cvss","old":null,"new":"9.8"},{"seq":178210,"id":"CVE-2026-87534","ts":1789346377510,"field":"severity","old":"none","new":"critical"},{"seq":177004,"id":"CVE-2026-87534","ts":1789343188089,"field":"cvss","old":"9.8","new":null},{"seq":177003,"id":"CVE-2026-87534","ts":1789343188089,"field":"severity","old":"critical","new":"none"},{"seq":175121,"id":"CVE-2026-87534","ts":1789334884131,"field":"cvss","old":null,"new":"9.8"},{"seq":175120,"id":"CVE-2026-87534","ts":1789334884131,"field":"severity","old":"none","new":"critical"},{"seq":173916,"id":"CVE-2026-87534","ts":1789333703278,"field":"cvss","old":"9.8","new":null},{"seq":173915,"id":"CVE-2026-87534","ts":1789333703278,"field":"severity","old":"critical","new":"none"},{"seq":172730,"id":"CVE-2026-87534","ts":1789331096512,"field":"cvss","old":null,"new":"9.8"},{"seq":172729,"id":"CVE-2026-87534","ts":1789331096512,"field":"severity","old":"none","new":"critical"}]}