{"id":"CVE-2026-87565","title":"Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page","summary":"Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-200"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-09","sourceUpdated":"2026-09-09T19:18:23.887","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87565","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/532968511","label":"chrome-cve-admin@google.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87565.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-87565"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87565"}],"tags":["nvd","cve.org","csaf","vex","red-hat","score-dispute"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T15:04:15.571657Z"},"epss":0.00299,"epssPercentile":0.22823,"scores":{"nvd":6.5,"adp":6.5,"vendor":4.3},"ingestedAt":"2026-09-09T01:17:17.506Z","slug":"CVE-2026-87565","body":"## Overview\n\nInformation leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87565.json)","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":202440,"id":"CVE-2026-87565","ts":1789400075011,"field":"cvss","old":null,"new":"6.5"},{"seq":202439,"id":"CVE-2026-87565","ts":1789400075011,"field":"severity","old":"none","new":"medium"},{"seq":201167,"id":"CVE-2026-87565","ts":1789397620158,"field":"cvss","old":"6.5","new":null},{"seq":201166,"id":"CVE-2026-87565","ts":1789397620158,"field":"severity","old":"medium","new":"none"},{"seq":199860,"id":"CVE-2026-87565","ts":1789395578119,"field":"cvss","old":null,"new":"6.5"},{"seq":199859,"id":"CVE-2026-87565","ts":1789395578119,"field":"severity","old":"none","new":"medium"},{"seq":199101,"id":"CVE-2026-87565","ts":1789392260237,"field":"cvss","old":"6.5","new":null},{"seq":199100,"id":"CVE-2026-87565","ts":1789392260237,"field":"severity","old":"medium","new":"none"},{"seq":197434,"id":"CVE-2026-87565","ts":1789384296781,"field":"cvss","old":null,"new":"6.5"},{"seq":197433,"id":"CVE-2026-87565","ts":1789384296781,"field":"severity","old":"none","new":"medium"},{"seq":196708,"id":"CVE-2026-87565","ts":1789383771657,"field":"cvss","old":"6.5","new":null},{"seq":196707,"id":"CVE-2026-87565","ts":1789383771657,"field":"severity","old":"medium","new":"none"},{"seq":195612,"id":"CVE-2026-87565","ts":1789380578155,"field":"cvss","old":null,"new":"6.5"},{"seq":195611,"id":"CVE-2026-87565","ts":1789380578155,"field":"severity","old":"none","new":"medium"},{"seq":194563,"id":"CVE-2026-87565","ts":1789378789385,"field":"cvss","old":"6.5","new":null},{"seq":194562,"id":"CVE-2026-87565","ts":1789378789385,"field":"severity","old":"medium","new":"none"},{"seq":193350,"id":"CVE-2026-87565","ts":1789376520805,"field":"cvss","old":null,"new":"6.5"},{"seq":193349,"id":"CVE-2026-87565","ts":1789376520805,"field":"severity","old":"none","new":"medium"},{"seq":192137,"id":"CVE-2026-87565","ts":1789373639190,"field":"cvss","old":"6.5","new":null},{"seq":192136,"id":"CVE-2026-87565","ts":1789373639190,"field":"severity","old":"medium","new":"none"},{"seq":190922,"id":"CVE-2026-87565","ts":1789369487725,"field":"cvss","old":null,"new":"6.5"},{"seq":190921,"id":"CVE-2026-87565","ts":1789369487725,"field":"severity","old":"none","new":"medium"},{"seq":189709,"id":"CVE-2026-87565","ts":1789368460769,"field":"cvss","old":"6.5","new":null},{"seq":189708,"id":"CVE-2026-87565","ts":1789368460769,"field":"severity","old":"medium","new":"none"},{"seq":188492,"id":"CVE-2026-87565","ts":1789365236733,"field":"cvss","old":null,"new":"6.5"},{"seq":188491,"id":"CVE-2026-87565","ts":1789365236733,"field":"severity","old":"none","new":"medium"},{"seq":187279,"id":"CVE-2026-87565","ts":1789363480105,"field":"cvss","old":"6.5","new":null},{"seq":187278,"id":"CVE-2026-87565","ts":1789363480105,"field":"severity","old":"medium","new":"none"},{"seq":186065,"id":"CVE-2026-87565","ts":1789361235381,"field":"cvss","old":null,"new":"6.5"},{"seq":186064,"id":"CVE-2026-87565","ts":1789361235381,"field":"severity","old":"none","new":"medium"},{"seq":184852,"id":"CVE-2026-87565","ts":1789358377124,"field":"cvss","old":"6.5","new":null},{"seq":184851,"id":"CVE-2026-87565","ts":1789358377124,"field":"severity","old":"medium","new":"none"},{"seq":183101,"id":"CVE-2026-87565","ts":1789354323233,"field":"cvss","old":null,"new":"6.5"},{"seq":183100,"id":"CVE-2026-87565","ts":1789354323233,"field":"severity","old":"none","new":"medium"},{"seq":181894,"id":"CVE-2026-87565","ts":1789353335083,"field":"cvss","old":"6.5","new":null},{"seq":181893,"id":"CVE-2026-87565","ts":1789353335083,"field":"severity","old":"medium","new":"none"},{"seq":180687,"id":"CVE-2026-87565","ts":1789350290727,"field":"cvss","old":null,"new":"6.5"},{"seq":180686,"id":"CVE-2026-87565","ts":1789350290727,"field":"severity","old":"none","new":"medium"},{"seq":179480,"id":"CVE-2026-87565","ts":1789348308384,"field":"cvss","old":"6.5","new":null},{"seq":179479,"id":"CVE-2026-87565","ts":1789348308384,"field":"severity","old":"medium","new":"none"},{"seq":178273,"id":"CVE-2026-87565","ts":1789346377725,"field":"cvss","old":null,"new":"6.5"},{"seq":178272,"id":"CVE-2026-87565","ts":1789346377725,"field":"severity","old":"none","new":"medium"},{"seq":177066,"id":"CVE-2026-87565","ts":1789343188326,"field":"cvss","old":"6.5","new":null},{"seq":177065,"id":"CVE-2026-87565","ts":1789343188326,"field":"severity","old":"medium","new":"none"},{"seq":175183,"id":"CVE-2026-87565","ts":1789334884378,"field":"cvss","old":null,"new":"6.5"},{"seq":175182,"id":"CVE-2026-87565","ts":1789334884378,"field":"severity","old":"none","new":"medium"},{"seq":173978,"id":"CVE-2026-87565","ts":1789333703501,"field":"cvss","old":"6.5","new":null},{"seq":173977,"id":"CVE-2026-87565","ts":1789333703501,"field":"severity","old":"medium","new":"none"},{"seq":172792,"id":"CVE-2026-87565","ts":1789331096734,"field":"cvss","old":null,"new":"6.5"},{"seq":172791,"id":"CVE-2026-87565","ts":1789331096734,"field":"severity","old":"none","new":"medium"}]}