{"id":"CVE-2026-87560","title":"Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page","summary":"Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cwe":["CWE-862"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T19:17:38.480","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87560","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/511824746","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T18:18:39.339860Z"},"epss":0.002,"epssPercentile":0.10089,"ingestedAt":"2026-09-09T01:17:17.509Z","slug":"CVE-2026-87560","body":"## Overview\n\nMissing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202430,"id":"CVE-2026-87560","ts":1789400074083,"field":"cvss","old":null,"new":"4.3"},{"seq":202429,"id":"CVE-2026-87560","ts":1789400074083,"field":"severity","old":"none","new":"medium"},{"seq":201157,"id":"CVE-2026-87560","ts":1789397620122,"field":"cvss","old":"4.3","new":null},{"seq":201156,"id":"CVE-2026-87560","ts":1789397620122,"field":"severity","old":"medium","new":"none"},{"seq":199850,"id":"CVE-2026-87560","ts":1789395578085,"field":"cvss","old":null,"new":"4.3"},{"seq":199849,"id":"CVE-2026-87560","ts":1789395578085,"field":"severity","old":"none","new":"medium"},{"seq":199091,"id":"CVE-2026-87560","ts":1789392260203,"field":"cvss","old":"4.3","new":null},{"seq":199090,"id":"CVE-2026-87560","ts":1789392260203,"field":"severity","old":"medium","new":"none"},{"seq":197424,"id":"CVE-2026-87560","ts":1789384296749,"field":"cvss","old":null,"new":"4.3"},{"seq":197423,"id":"CVE-2026-87560","ts":1789384296749,"field":"severity","old":"none","new":"medium"},{"seq":196698,"id":"CVE-2026-87560","ts":1789383771001,"field":"cvss","old":"4.3","new":null},{"seq":196697,"id":"CVE-2026-87560","ts":1789383771001,"field":"severity","old":"medium","new":"none"},{"seq":195602,"id":"CVE-2026-87560","ts":1789380578121,"field":"cvss","old":null,"new":"4.3"},{"seq":195601,"id":"CVE-2026-87560","ts":1789380578121,"field":"severity","old":"none","new":"medium"},{"seq":194553,"id":"CVE-2026-87560","ts":1789378789351,"field":"cvss","old":"4.3","new":null},{"seq":194552,"id":"CVE-2026-87560","ts":1789378789351,"field":"severity","old":"medium","new":"none"},{"seq":193340,"id":"CVE-2026-87560","ts":1789376520768,"field":"cvss","old":null,"new":"4.3"},{"seq":193339,"id":"CVE-2026-87560","ts":1789376520768,"field":"severity","old":"none","new":"medium"},{"seq":192127,"id":"CVE-2026-87560","ts":1789373639151,"field":"cvss","old":"4.3","new":null},{"seq":192126,"id":"CVE-2026-87560","ts":1789373639151,"field":"severity","old":"medium","new":"none"},{"seq":190912,"id":"CVE-2026-87560","ts":1789369487680,"field":"cvss","old":null,"new":"4.3"},{"seq":190911,"id":"CVE-2026-87560","ts":1789369487680,"field":"severity","old":"none","new":"medium"},{"seq":189699,"id":"CVE-2026-87560","ts":1789368460733,"field":"cvss","old":"4.3","new":null},{"seq":189698,"id":"CVE-2026-87560","ts":1789368460733,"field":"severity","old":"medium","new":"none"},{"seq":188482,"id":"CVE-2026-87560","ts":1789365236696,"field":"cvss","old":null,"new":"4.3"},{"seq":188481,"id":"CVE-2026-87560","ts":1789365236696,"field":"severity","old":"none","new":"medium"},{"seq":187269,"id":"CVE-2026-87560","ts":1789363480071,"field":"cvss","old":"4.3","new":null},{"seq":187268,"id":"CVE-2026-87560","ts":1789363480071,"field":"severity","old":"medium","new":"none"},{"seq":186055,"id":"CVE-2026-87560","ts":1789361235340,"field":"cvss","old":null,"new":"4.3"},{"seq":186054,"id":"CVE-2026-87560","ts":1789361235340,"field":"severity","old":"none","new":"medium"},{"seq":184842,"id":"CVE-2026-87560","ts":1789358377081,"field":"cvss","old":"4.3","new":null},{"seq":184841,"id":"CVE-2026-87560","ts":1789358377081,"field":"severity","old":"medium","new":"none"},{"seq":183091,"id":"CVE-2026-87560","ts":1789354323194,"field":"cvss","old":null,"new":"4.3"},{"seq":183090,"id":"CVE-2026-87560","ts":1789354323194,"field":"severity","old":"none","new":"medium"},{"seq":181884,"id":"CVE-2026-87560","ts":1789353335050,"field":"cvss","old":"4.3","new":null},{"seq":181883,"id":"CVE-2026-87560","ts":1789353335050,"field":"severity","old":"medium","new":"none"},{"seq":180677,"id":"CVE-2026-87560","ts":1789350290690,"field":"cvss","old":null,"new":"4.3"},{"seq":180676,"id":"CVE-2026-87560","ts":1789350290690,"field":"severity","old":"none","new":"medium"},{"seq":179470,"id":"CVE-2026-87560","ts":1789348308344,"field":"cvss","old":"4.3","new":null},{"seq":179469,"id":"CVE-2026-87560","ts":1789348308344,"field":"severity","old":"medium","new":"none"},{"seq":178263,"id":"CVE-2026-87560","ts":1789346377691,"field":"cvss","old":null,"new":"4.3"},{"seq":178262,"id":"CVE-2026-87560","ts":1789346377691,"field":"severity","old":"none","new":"medium"},{"seq":177056,"id":"CVE-2026-87560","ts":1789343188287,"field":"cvss","old":"4.3","new":null},{"seq":177055,"id":"CVE-2026-87560","ts":1789343188287,"field":"severity","old":"medium","new":"none"},{"seq":175173,"id":"CVE-2026-87560","ts":1789334884340,"field":"cvss","old":null,"new":"4.3"},{"seq":175172,"id":"CVE-2026-87560","ts":1789334884340,"field":"severity","old":"none","new":"medium"},{"seq":173968,"id":"CVE-2026-87560","ts":1789333703466,"field":"cvss","old":"4.3","new":null},{"seq":173967,"id":"CVE-2026-87560","ts":1789333703466,"field":"severity","old":"medium","new":"none"},{"seq":172782,"id":"CVE-2026-87560","ts":1789331096699,"field":"cvss","old":null,"new":"4.3"},{"seq":172781,"id":"CVE-2026-87560","ts":1789331096699,"field":"severity","old":"none","new":"medium"}]}