{"id":"CVE-2026-87559","title":"UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page","summary":"UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)","severity":"medium","cvss":4.2,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-451"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-09","sourceUpdated":"2026-09-09T20:22:45.730","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87559","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/514011926","label":"chrome-cve-admin@google.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87559.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-87559"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87559"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T19:45:09.723035Z"},"epss":0.00203,"epssPercentile":0.1059,"scores":{"nvd":4.2,"vendor":5.4,"adp":4.2},"ingestedAt":"2026-09-09T01:17:17.509Z","slug":"CVE-2026-87559","body":"## Overview\n\nUI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87559.json)","depth":"sunlit","depthScore":23,"depthScoreParts":{"impact":23.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202428,"id":"CVE-2026-87559","ts":1789400073899,"field":"cvss","old":null,"new":"4.2"},{"seq":202427,"id":"CVE-2026-87559","ts":1789400073899,"field":"severity","old":"none","new":"medium"},{"seq":201155,"id":"CVE-2026-87559","ts":1789397620114,"field":"cvss","old":"4.2","new":null},{"seq":201154,"id":"CVE-2026-87559","ts":1789397620114,"field":"severity","old":"medium","new":"none"},{"seq":199848,"id":"CVE-2026-87559","ts":1789395578078,"field":"cvss","old":null,"new":"4.2"},{"seq":199847,"id":"CVE-2026-87559","ts":1789395578078,"field":"severity","old":"none","new":"medium"},{"seq":199089,"id":"CVE-2026-87559","ts":1789392260197,"field":"cvss","old":"4.2","new":null},{"seq":199088,"id":"CVE-2026-87559","ts":1789392260197,"field":"severity","old":"medium","new":"none"},{"seq":197422,"id":"CVE-2026-87559","ts":1789384296742,"field":"cvss","old":null,"new":"4.2"},{"seq":197421,"id":"CVE-2026-87559","ts":1789384296742,"field":"severity","old":"none","new":"medium"},{"seq":196696,"id":"CVE-2026-87559","ts":1789383770869,"field":"cvss","old":"4.2","new":null},{"seq":196695,"id":"CVE-2026-87559","ts":1789383770869,"field":"severity","old":"medium","new":"none"},{"seq":195600,"id":"CVE-2026-87559","ts":1789380578114,"field":"cvss","old":null,"new":"4.2"},{"seq":195599,"id":"CVE-2026-87559","ts":1789380578114,"field":"severity","old":"none","new":"medium"},{"seq":194551,"id":"CVE-2026-87559","ts":1789378789345,"field":"cvss","old":"4.2","new":null},{"seq":194550,"id":"CVE-2026-87559","ts":1789378789345,"field":"severity","old":"medium","new":"none"},{"seq":193338,"id":"CVE-2026-87559","ts":1789376520761,"field":"cvss","old":null,"new":"4.2"},{"seq":193337,"id":"CVE-2026-87559","ts":1789376520761,"field":"severity","old":"none","new":"medium"},{"seq":192125,"id":"CVE-2026-87559","ts":1789373639143,"field":"cvss","old":"4.2","new":null},{"seq":192124,"id":"CVE-2026-87559","ts":1789373639143,"field":"severity","old":"medium","new":"none"},{"seq":190910,"id":"CVE-2026-87559","ts":1789369487672,"field":"cvss","old":null,"new":"4.2"},{"seq":190909,"id":"CVE-2026-87559","ts":1789369487672,"field":"severity","old":"none","new":"medium"},{"seq":189697,"id":"CVE-2026-87559","ts":1789368460726,"field":"cvss","old":"4.2","new":null},{"seq":189696,"id":"CVE-2026-87559","ts":1789368460726,"field":"severity","old":"medium","new":"none"},{"seq":188480,"id":"CVE-2026-87559","ts":1789365236687,"field":"cvss","old":null,"new":"4.2"},{"seq":188479,"id":"CVE-2026-87559","ts":1789365236687,"field":"severity","old":"none","new":"medium"},{"seq":187267,"id":"CVE-2026-87559","ts":1789363480064,"field":"cvss","old":"4.2","new":null},{"seq":187266,"id":"CVE-2026-87559","ts":1789363480064,"field":"severity","old":"medium","new":"none"},{"seq":186053,"id":"CVE-2026-87559","ts":1789361235332,"field":"cvss","old":null,"new":"4.2"},{"seq":186052,"id":"CVE-2026-87559","ts":1789361235332,"field":"severity","old":"none","new":"medium"},{"seq":184840,"id":"CVE-2026-87559","ts":1789358377073,"field":"cvss","old":"4.2","new":null},{"seq":184839,"id":"CVE-2026-87559","ts":1789358377073,"field":"severity","old":"medium","new":"none"},{"seq":183089,"id":"CVE-2026-87559","ts":1789354323186,"field":"cvss","old":null,"new":"4.2"},{"seq":183088,"id":"CVE-2026-87559","ts":1789354323186,"field":"severity","old":"none","new":"medium"},{"seq":181882,"id":"CVE-2026-87559","ts":1789353335043,"field":"cvss","old":"4.2","new":null},{"seq":181881,"id":"CVE-2026-87559","ts":1789353335043,"field":"severity","old":"medium","new":"none"},{"seq":180675,"id":"CVE-2026-87559","ts":1789350290683,"field":"cvss","old":null,"new":"4.2"},{"seq":180674,"id":"CVE-2026-87559","ts":1789350290683,"field":"severity","old":"none","new":"medium"},{"seq":179468,"id":"CVE-2026-87559","ts":1789348308336,"field":"cvss","old":"4.2","new":null},{"seq":179467,"id":"CVE-2026-87559","ts":1789348308336,"field":"severity","old":"medium","new":"none"},{"seq":178261,"id":"CVE-2026-87559","ts":1789346377684,"field":"cvss","old":null,"new":"4.2"},{"seq":178260,"id":"CVE-2026-87559","ts":1789346377684,"field":"severity","old":"none","new":"medium"},{"seq":177054,"id":"CVE-2026-87559","ts":1789343188280,"field":"cvss","old":"4.2","new":null},{"seq":177053,"id":"CVE-2026-87559","ts":1789343188280,"field":"severity","old":"medium","new":"none"},{"seq":175171,"id":"CVE-2026-87559","ts":1789334884333,"field":"cvss","old":null,"new":"4.2"},{"seq":175170,"id":"CVE-2026-87559","ts":1789334884333,"field":"severity","old":"none","new":"medium"},{"seq":173966,"id":"CVE-2026-87559","ts":1789333703459,"field":"cvss","old":"4.2","new":null},{"seq":173965,"id":"CVE-2026-87559","ts":1789333703459,"field":"severity","old":"medium","new":"none"},{"seq":172780,"id":"CVE-2026-87559","ts":1789331096692,"field":"cvss","old":null,"new":"4.2"},{"seq":172779,"id":"CVE-2026-87559","ts":1789331096692,"field":"severity","old":"none","new":"medium"}]}