{"id":"CVE-2026-87562","title":"Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page","summary":"Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cwe":["CWE-706"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-09","sourceUpdated":"2026-09-09T20:21:09.487","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87562","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/513135531","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T19:39:22.886726Z"},"scores":{"nvd":4.3,"adp":5.4},"epss":0.00185,"epssPercentile":0.08298,"ingestedAt":"2026-09-09T01:17:17.509Z","slug":"CVE-2026-87562","body":"## Overview\n\nIncorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202434,"id":"CVE-2026-87562","ts":1789400074451,"field":"cvss","old":null,"new":"4.3"},{"seq":202433,"id":"CVE-2026-87562","ts":1789400074451,"field":"severity","old":"none","new":"medium"},{"seq":201161,"id":"CVE-2026-87562","ts":1789397620136,"field":"cvss","old":"4.3","new":null},{"seq":201160,"id":"CVE-2026-87562","ts":1789397620136,"field":"severity","old":"medium","new":"none"},{"seq":199854,"id":"CVE-2026-87562","ts":1789395578099,"field":"cvss","old":null,"new":"4.3"},{"seq":199853,"id":"CVE-2026-87562","ts":1789395578099,"field":"severity","old":"none","new":"medium"},{"seq":199095,"id":"CVE-2026-87562","ts":1789392260217,"field":"cvss","old":"4.3","new":null},{"seq":199094,"id":"CVE-2026-87562","ts":1789392260217,"field":"severity","old":"medium","new":"none"},{"seq":197428,"id":"CVE-2026-87562","ts":1789384296762,"field":"cvss","old":null,"new":"4.3"},{"seq":197427,"id":"CVE-2026-87562","ts":1789384296762,"field":"severity","old":"none","new":"medium"},{"seq":196702,"id":"CVE-2026-87562","ts":1789383771262,"field":"cvss","old":"4.3","new":null},{"seq":196701,"id":"CVE-2026-87562","ts":1789383771262,"field":"severity","old":"medium","new":"none"},{"seq":195606,"id":"CVE-2026-87562","ts":1789380578134,"field":"cvss","old":null,"new":"4.3"},{"seq":195605,"id":"CVE-2026-87562","ts":1789380578134,"field":"severity","old":"none","new":"medium"},{"seq":194557,"id":"CVE-2026-87562","ts":1789378789365,"field":"cvss","old":"4.3","new":null},{"seq":194556,"id":"CVE-2026-87562","ts":1789378789365,"field":"severity","old":"medium","new":"none"},{"seq":193344,"id":"CVE-2026-87562","ts":1789376520782,"field":"cvss","old":null,"new":"4.3"},{"seq":193343,"id":"CVE-2026-87562","ts":1789376520782,"field":"severity","old":"none","new":"medium"},{"seq":192131,"id":"CVE-2026-87562","ts":1789373639167,"field":"cvss","old":"4.3","new":null},{"seq":192130,"id":"CVE-2026-87562","ts":1789373639167,"field":"severity","old":"medium","new":"none"},{"seq":190916,"id":"CVE-2026-87562","ts":1789369487697,"field":"cvss","old":null,"new":"4.3"},{"seq":190915,"id":"CVE-2026-87562","ts":1789369487697,"field":"severity","old":"none","new":"medium"},{"seq":189703,"id":"CVE-2026-87562","ts":1789368460747,"field":"cvss","old":"4.3","new":null},{"seq":189702,"id":"CVE-2026-87562","ts":1789368460747,"field":"severity","old":"medium","new":"none"},{"seq":188486,"id":"CVE-2026-87562","ts":1789365236711,"field":"cvss","old":null,"new":"4.3"},{"seq":188485,"id":"CVE-2026-87562","ts":1789365236711,"field":"severity","old":"none","new":"medium"},{"seq":187273,"id":"CVE-2026-87562","ts":1789363480084,"field":"cvss","old":"4.3","new":null},{"seq":187272,"id":"CVE-2026-87562","ts":1789363480084,"field":"severity","old":"medium","new":"none"},{"seq":186059,"id":"CVE-2026-87562","ts":1789361235356,"field":"cvss","old":null,"new":"4.3"},{"seq":186058,"id":"CVE-2026-87562","ts":1789361235356,"field":"severity","old":"none","new":"medium"},{"seq":184846,"id":"CVE-2026-87562","ts":1789358377098,"field":"cvss","old":"4.3","new":null},{"seq":184845,"id":"CVE-2026-87562","ts":1789358377098,"field":"severity","old":"medium","new":"none"},{"seq":183095,"id":"CVE-2026-87562","ts":1789354323210,"field":"cvss","old":null,"new":"4.3"},{"seq":183094,"id":"CVE-2026-87562","ts":1789354323210,"field":"severity","old":"none","new":"medium"},{"seq":181888,"id":"CVE-2026-87562","ts":1789353335063,"field":"cvss","old":"4.3","new":null},{"seq":181887,"id":"CVE-2026-87562","ts":1789353335063,"field":"severity","old":"medium","new":"none"},{"seq":180681,"id":"CVE-2026-87562","ts":1789350290705,"field":"cvss","old":null,"new":"4.3"},{"seq":180680,"id":"CVE-2026-87562","ts":1789350290705,"field":"severity","old":"none","new":"medium"},{"seq":179474,"id":"CVE-2026-87562","ts":1789348308360,"field":"cvss","old":"4.3","new":null},{"seq":179473,"id":"CVE-2026-87562","ts":1789348308360,"field":"severity","old":"medium","new":"none"},{"seq":178267,"id":"CVE-2026-87562","ts":1789346377704,"field":"cvss","old":null,"new":"4.3"},{"seq":178266,"id":"CVE-2026-87562","ts":1789346377704,"field":"severity","old":"none","new":"medium"},{"seq":177060,"id":"CVE-2026-87562","ts":1789343188301,"field":"cvss","old":"4.3","new":null},{"seq":177059,"id":"CVE-2026-87562","ts":1789343188301,"field":"severity","old":"medium","new":"none"},{"seq":175177,"id":"CVE-2026-87562","ts":1789334884355,"field":"cvss","old":null,"new":"4.3"},{"seq":175176,"id":"CVE-2026-87562","ts":1789334884355,"field":"severity","old":"none","new":"medium"},{"seq":173972,"id":"CVE-2026-87562","ts":1789333703480,"field":"cvss","old":"4.3","new":null},{"seq":173971,"id":"CVE-2026-87562","ts":1789333703480,"field":"severity","old":"medium","new":"none"},{"seq":172786,"id":"CVE-2026-87562","ts":1789331096713,"field":"cvss","old":null,"new":"4.3"},{"seq":172785,"id":"CVE-2026-87562","ts":1789331096713,"field":"severity","old":"none","new":"medium"}]}