{"id":"CVE-2026-87573","title":"Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page","summary":"Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-20"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-09","sourceUpdated":"2026-09-09T19:13:28.753","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87573","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/513438970","label":"chrome-cve-admin@google.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87573.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-87573"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87573"}],"tags":["nvd","cve.org","csaf","vex","red-hat","score-dispute"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T17:25:09.893435Z"},"epss":0.00208,"epssPercentile":0.1119,"scores":{"nvd":4.3,"vendor":8,"adp":4.3},"ingestedAt":"2026-09-09T01:17:17.509Z","slug":"CVE-2026-87573","body":"## Overview\n\nImproper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87573.json)","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202456,"id":"CVE-2026-87573","ts":1789400076628,"field":"cvss","old":null,"new":"4.3"},{"seq":202455,"id":"CVE-2026-87573","ts":1789400076628,"field":"severity","old":"none","new":"medium"},{"seq":201183,"id":"CVE-2026-87573","ts":1789397620218,"field":"cvss","old":"4.3","new":null},{"seq":201182,"id":"CVE-2026-87573","ts":1789397620218,"field":"severity","old":"medium","new":"none"},{"seq":199876,"id":"CVE-2026-87573","ts":1789395578175,"field":"cvss","old":null,"new":"4.3"},{"seq":199875,"id":"CVE-2026-87573","ts":1789395578175,"field":"severity","old":"none","new":"medium"},{"seq":199117,"id":"CVE-2026-87573","ts":1789392260290,"field":"cvss","old":"4.3","new":null},{"seq":199116,"id":"CVE-2026-87573","ts":1789392260290,"field":"severity","old":"medium","new":"none"},{"seq":197450,"id":"CVE-2026-87573","ts":1789384296832,"field":"cvss","old":null,"new":"4.3"},{"seq":197449,"id":"CVE-2026-87573","ts":1789384296832,"field":"severity","old":"none","new":"medium"},{"seq":196724,"id":"CVE-2026-87573","ts":1789383772710,"field":"cvss","old":"4.3","new":null},{"seq":196723,"id":"CVE-2026-87573","ts":1789383772710,"field":"severity","old":"medium","new":"none"},{"seq":195628,"id":"CVE-2026-87573","ts":1789380578208,"field":"cvss","old":null,"new":"4.3"},{"seq":195627,"id":"CVE-2026-87573","ts":1789380578208,"field":"severity","old":"none","new":"medium"},{"seq":194579,"id":"CVE-2026-87573","ts":1789378789442,"field":"cvss","old":"4.3","new":null},{"seq":194578,"id":"CVE-2026-87573","ts":1789378789442,"field":"severity","old":"medium","new":"none"},{"seq":193366,"id":"CVE-2026-87573","ts":1789376520862,"field":"cvss","old":null,"new":"4.3"},{"seq":193365,"id":"CVE-2026-87573","ts":1789376520862,"field":"severity","old":"none","new":"medium"},{"seq":192153,"id":"CVE-2026-87573","ts":1789373639249,"field":"cvss","old":"4.3","new":null},{"seq":192152,"id":"CVE-2026-87573","ts":1789373639249,"field":"severity","old":"medium","new":"none"},{"seq":190938,"id":"CVE-2026-87573","ts":1789369487833,"field":"cvss","old":null,"new":"4.3"},{"seq":190937,"id":"CVE-2026-87573","ts":1789369487833,"field":"severity","old":"none","new":"medium"},{"seq":189725,"id":"CVE-2026-87573","ts":1789368460823,"field":"cvss","old":"4.3","new":null},{"seq":189724,"id":"CVE-2026-87573","ts":1789368460823,"field":"severity","old":"medium","new":"none"},{"seq":188508,"id":"CVE-2026-87573","ts":1789365236788,"field":"cvss","old":null,"new":"4.3"},{"seq":188507,"id":"CVE-2026-87573","ts":1789365236788,"field":"severity","old":"none","new":"medium"},{"seq":187295,"id":"CVE-2026-87573","ts":1789363480159,"field":"cvss","old":"4.3","new":null},{"seq":187294,"id":"CVE-2026-87573","ts":1789363480159,"field":"severity","old":"medium","new":"none"},{"seq":186081,"id":"CVE-2026-87573","ts":1789361235444,"field":"cvss","old":null,"new":"4.3"},{"seq":186080,"id":"CVE-2026-87573","ts":1789361235444,"field":"severity","old":"none","new":"medium"},{"seq":184868,"id":"CVE-2026-87573","ts":1789358377185,"field":"cvss","old":"4.3","new":null},{"seq":184867,"id":"CVE-2026-87573","ts":1789358377185,"field":"severity","old":"medium","new":"none"},{"seq":183117,"id":"CVE-2026-87573","ts":1789354323297,"field":"cvss","old":null,"new":"4.3"},{"seq":183116,"id":"CVE-2026-87573","ts":1789354323297,"field":"severity","old":"none","new":"medium"},{"seq":181910,"id":"CVE-2026-87573","ts":1789353335139,"field":"cvss","old":"4.3","new":null},{"seq":181909,"id":"CVE-2026-87573","ts":1789353335139,"field":"severity","old":"medium","new":"none"},{"seq":180703,"id":"CVE-2026-87573","ts":1789350290783,"field":"cvss","old":null,"new":"4.3"},{"seq":180702,"id":"CVE-2026-87573","ts":1789350290783,"field":"severity","old":"none","new":"medium"},{"seq":179496,"id":"CVE-2026-87573","ts":1789348308444,"field":"cvss","old":"4.3","new":null},{"seq":179495,"id":"CVE-2026-87573","ts":1789348308444,"field":"severity","old":"medium","new":"none"},{"seq":178289,"id":"CVE-2026-87573","ts":1789346377779,"field":"cvss","old":null,"new":"4.3"},{"seq":178288,"id":"CVE-2026-87573","ts":1789346377779,"field":"severity","old":"none","new":"medium"},{"seq":177082,"id":"CVE-2026-87573","ts":1789343188390,"field":"cvss","old":"4.3","new":null},{"seq":177081,"id":"CVE-2026-87573","ts":1789343188390,"field":"severity","old":"medium","new":"none"},{"seq":175199,"id":"CVE-2026-87573","ts":1789334884439,"field":"cvss","old":null,"new":"4.3"},{"seq":175198,"id":"CVE-2026-87573","ts":1789334884439,"field":"severity","old":"none","new":"medium"},{"seq":173994,"id":"CVE-2026-87573","ts":1789333703556,"field":"cvss","old":"4.3","new":null},{"seq":173993,"id":"CVE-2026-87573","ts":1789333703556,"field":"severity","old":"medium","new":"none"},{"seq":172808,"id":"CVE-2026-87573","ts":1789331096788,"field":"cvss","old":null,"new":"4.3"},{"seq":172807,"id":"CVE-2026-87573","ts":1789331096788,"field":"severity","old":"none","new":"medium"}]}