{"id":"CVE-2026-87546","title":"Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted file","summary":"Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Low)","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cwe":["CWE-704"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-14","sourceUpdated":"2026-09-14T13:18:58.480","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87546","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/517926950","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-14T12:40:35.539737Z"},"epss":0.00204,"epssPercentile":0.10691,"ingestedAt":"2026-09-09T01:17:17.506Z","slug":"CVE-2026-87546","body":"## Overview\n\nIncorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Low)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202402,"id":"CVE-2026-87546","ts":1789400071515,"field":"cvss","old":null,"new":"4.3"},{"seq":202401,"id":"CVE-2026-87546","ts":1789400071515,"field":"severity","old":"none","new":"medium"},{"seq":201129,"id":"CVE-2026-87546","ts":1789397620012,"field":"cvss","old":"4.3","new":null},{"seq":201128,"id":"CVE-2026-87546","ts":1789397620012,"field":"severity","old":"medium","new":"none"},{"seq":199822,"id":"CVE-2026-87546","ts":1789395577985,"field":"cvss","old":null,"new":"4.3"},{"seq":199821,"id":"CVE-2026-87546","ts":1789395577985,"field":"severity","old":"none","new":"medium"},{"seq":199063,"id":"CVE-2026-87546","ts":1789392260111,"field":"cvss","old":"4.3","new":null},{"seq":199062,"id":"CVE-2026-87546","ts":1789392260111,"field":"severity","old":"medium","new":"none"},{"seq":197396,"id":"CVE-2026-87546","ts":1789384296644,"field":"cvss","old":null,"new":"4.3"},{"seq":197395,"id":"CVE-2026-87546","ts":1789384296644,"field":"severity","old":"none","new":"medium"},{"seq":196670,"id":"CVE-2026-87546","ts":1789383769168,"field":"cvss","old":"4.3","new":null},{"seq":196669,"id":"CVE-2026-87546","ts":1789383769168,"field":"severity","old":"medium","new":"none"},{"seq":195574,"id":"CVE-2026-87546","ts":1789380578026,"field":"cvss","old":null,"new":"4.3"},{"seq":195573,"id":"CVE-2026-87546","ts":1789380578026,"field":"severity","old":"none","new":"medium"},{"seq":194525,"id":"CVE-2026-87546","ts":1789378789254,"field":"cvss","old":"4.3","new":null},{"seq":194524,"id":"CVE-2026-87546","ts":1789378789254,"field":"severity","old":"medium","new":"none"},{"seq":193312,"id":"CVE-2026-87546","ts":1789376520668,"field":"cvss","old":null,"new":"4.3"},{"seq":193311,"id":"CVE-2026-87546","ts":1789376520668,"field":"severity","old":"none","new":"medium"},{"seq":192099,"id":"CVE-2026-87546","ts":1789373639035,"field":"cvss","old":"4.3","new":null},{"seq":192098,"id":"CVE-2026-87546","ts":1789373639035,"field":"severity","old":"medium","new":"none"},{"seq":190884,"id":"CVE-2026-87546","ts":1789369487566,"field":"cvss","old":null,"new":"4.3"},{"seq":190883,"id":"CVE-2026-87546","ts":1789369487566,"field":"severity","old":"none","new":"medium"},{"seq":189671,"id":"CVE-2026-87546","ts":1789368460634,"field":"cvss","old":"4.3","new":null},{"seq":189670,"id":"CVE-2026-87546","ts":1789368460634,"field":"severity","old":"medium","new":"none"},{"seq":188454,"id":"CVE-2026-87546","ts":1789365236591,"field":"cvss","old":null,"new":"4.3"},{"seq":188453,"id":"CVE-2026-87546","ts":1789365236591,"field":"severity","old":"none","new":"medium"},{"seq":187241,"id":"CVE-2026-87546","ts":1789363479972,"field":"cvss","old":"4.3","new":null},{"seq":187240,"id":"CVE-2026-87546","ts":1789363479972,"field":"severity","old":"medium","new":"none"},{"seq":186027,"id":"CVE-2026-87546","ts":1789361235232,"field":"cvss","old":null,"new":"4.3"},{"seq":186026,"id":"CVE-2026-87546","ts":1789361235232,"field":"severity","old":"none","new":"medium"},{"seq":184814,"id":"CVE-2026-87546","ts":1789358376971,"field":"cvss","old":"4.3","new":null},{"seq":184813,"id":"CVE-2026-87546","ts":1789358376971,"field":"severity","old":"medium","new":"none"},{"seq":183063,"id":"CVE-2026-87546","ts":1789354323084,"field":"cvss","old":null,"new":"4.3"},{"seq":183062,"id":"CVE-2026-87546","ts":1789354323084,"field":"severity","old":"none","new":"medium"},{"seq":181856,"id":"CVE-2026-87546","ts":1789353334952,"field":"cvss","old":"4.3","new":null},{"seq":181855,"id":"CVE-2026-87546","ts":1789353334952,"field":"severity","old":"medium","new":"none"},{"seq":180649,"id":"CVE-2026-87546","ts":1789350290582,"field":"cvss","old":null,"new":"4.3"},{"seq":180648,"id":"CVE-2026-87546","ts":1789350290582,"field":"severity","old":"none","new":"medium"},{"seq":179442,"id":"CVE-2026-87546","ts":1789348308241,"field":"cvss","old":"4.3","new":null},{"seq":179441,"id":"CVE-2026-87546","ts":1789348308241,"field":"severity","old":"medium","new":"none"},{"seq":178235,"id":"CVE-2026-87546","ts":1789346377597,"field":"cvss","old":null,"new":"4.3"},{"seq":178234,"id":"CVE-2026-87546","ts":1789346377597,"field":"severity","old":"none","new":"medium"},{"seq":177028,"id":"CVE-2026-87546","ts":1789343188189,"field":"cvss","old":"4.3","new":null},{"seq":177027,"id":"CVE-2026-87546","ts":1789343188189,"field":"severity","old":"medium","new":"none"},{"seq":175145,"id":"CVE-2026-87546","ts":1789334884233,"field":"cvss","old":null,"new":"4.3"},{"seq":175144,"id":"CVE-2026-87546","ts":1789334884233,"field":"severity","old":"none","new":"medium"},{"seq":173940,"id":"CVE-2026-87546","ts":1789333703369,"field":"cvss","old":"4.3","new":null},{"seq":173939,"id":"CVE-2026-87546","ts":1789333703369,"field":"severity","old":"medium","new":"none"},{"seq":172754,"id":"CVE-2026-87546","ts":1789331096605,"field":"cvss","old":null,"new":"4.3"},{"seq":172753,"id":"CVE-2026-87546","ts":1789331096605,"field":"severity","old":"none","new":"medium"}]}