{"id":"CVE-2026-87577","title":"Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page","summary":"Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium)","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-863"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T13:49:30.050","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87577","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/501700023","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"epss":0.00197,"epssPercentile":0.09686,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T17:25:13.714964Z"},"ingestedAt":"2026-09-09T01:17:17.510Z","slug":"CVE-2026-87577","body":"## Overview\n\nIncorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202465,"id":"CVE-2026-87577","ts":1789400077394,"field":"cvss","old":null,"new":"4.3"},{"seq":202464,"id":"CVE-2026-87577","ts":1789400077394,"field":"severity","old":"none","new":"medium"},{"seq":201192,"id":"CVE-2026-87577","ts":1789397620249,"field":"cvss","old":"4.3","new":null},{"seq":201191,"id":"CVE-2026-87577","ts":1789397620249,"field":"severity","old":"medium","new":"none"},{"seq":199885,"id":"CVE-2026-87577","ts":1789395578203,"field":"cvss","old":null,"new":"4.3"},{"seq":199884,"id":"CVE-2026-87577","ts":1789395578203,"field":"severity","old":"none","new":"medium"},{"seq":199126,"id":"CVE-2026-87577","ts":1789392260317,"field":"cvss","old":"4.3","new":null},{"seq":199125,"id":"CVE-2026-87577","ts":1789392260317,"field":"severity","old":"medium","new":"none"},{"seq":197459,"id":"CVE-2026-87577","ts":1789384296858,"field":"cvss","old":null,"new":"4.3"},{"seq":197458,"id":"CVE-2026-87577","ts":1789384296858,"field":"severity","old":"none","new":"medium"},{"seq":196733,"id":"CVE-2026-87577","ts":1789383773234,"field":"cvss","old":"4.3","new":null},{"seq":196732,"id":"CVE-2026-87577","ts":1789383773234,"field":"severity","old":"medium","new":"none"},{"seq":195637,"id":"CVE-2026-87577","ts":1789380578235,"field":"cvss","old":null,"new":"4.3"},{"seq":195636,"id":"CVE-2026-87577","ts":1789380578235,"field":"severity","old":"none","new":"medium"},{"seq":194588,"id":"CVE-2026-87577","ts":1789378789470,"field":"cvss","old":"4.3","new":null},{"seq":194587,"id":"CVE-2026-87577","ts":1789378789470,"field":"severity","old":"medium","new":"none"},{"seq":193375,"id":"CVE-2026-87577","ts":1789376520891,"field":"cvss","old":null,"new":"4.3"},{"seq":193374,"id":"CVE-2026-87577","ts":1789376520891,"field":"severity","old":"none","new":"medium"},{"seq":192162,"id":"CVE-2026-87577","ts":1789373639278,"field":"cvss","old":"4.3","new":null},{"seq":192161,"id":"CVE-2026-87577","ts":1789373639278,"field":"severity","old":"medium","new":"none"},{"seq":190947,"id":"CVE-2026-87577","ts":1789369487864,"field":"cvss","old":null,"new":"4.3"},{"seq":190946,"id":"CVE-2026-87577","ts":1789369487864,"field":"severity","old":"none","new":"medium"},{"seq":189734,"id":"CVE-2026-87577","ts":1789368460852,"field":"cvss","old":"4.3","new":null},{"seq":189733,"id":"CVE-2026-87577","ts":1789368460852,"field":"severity","old":"medium","new":"none"},{"seq":188517,"id":"CVE-2026-87577","ts":1789365236816,"field":"cvss","old":null,"new":"4.3"},{"seq":188516,"id":"CVE-2026-87577","ts":1789365236816,"field":"severity","old":"none","new":"medium"},{"seq":187304,"id":"CVE-2026-87577","ts":1789363480186,"field":"cvss","old":"4.3","new":null},{"seq":187303,"id":"CVE-2026-87577","ts":1789363480186,"field":"severity","old":"medium","new":"none"},{"seq":186090,"id":"CVE-2026-87577","ts":1789361235475,"field":"cvss","old":null,"new":"4.3"},{"seq":186089,"id":"CVE-2026-87577","ts":1789361235475,"field":"severity","old":"none","new":"medium"},{"seq":184877,"id":"CVE-2026-87577","ts":1789358377217,"field":"cvss","old":"4.3","new":null},{"seq":184876,"id":"CVE-2026-87577","ts":1789358377217,"field":"severity","old":"medium","new":"none"},{"seq":183126,"id":"CVE-2026-87577","ts":1789354323328,"field":"cvss","old":null,"new":"4.3"},{"seq":183125,"id":"CVE-2026-87577","ts":1789354323328,"field":"severity","old":"none","new":"medium"},{"seq":181919,"id":"CVE-2026-87577","ts":1789353335166,"field":"cvss","old":"4.3","new":null},{"seq":181918,"id":"CVE-2026-87577","ts":1789353335166,"field":"severity","old":"medium","new":"none"},{"seq":180712,"id":"CVE-2026-87577","ts":1789350290812,"field":"cvss","old":null,"new":"4.3"},{"seq":180711,"id":"CVE-2026-87577","ts":1789350290812,"field":"severity","old":"none","new":"medium"},{"seq":179505,"id":"CVE-2026-87577","ts":1789348308476,"field":"cvss","old":"4.3","new":null},{"seq":179504,"id":"CVE-2026-87577","ts":1789348308476,"field":"severity","old":"medium","new":"none"},{"seq":178298,"id":"CVE-2026-87577","ts":1789346377806,"field":"cvss","old":null,"new":"4.3"},{"seq":178297,"id":"CVE-2026-87577","ts":1789346377806,"field":"severity","old":"none","new":"medium"},{"seq":177091,"id":"CVE-2026-87577","ts":1789343188424,"field":"cvss","old":"4.3","new":null},{"seq":177090,"id":"CVE-2026-87577","ts":1789343188424,"field":"severity","old":"medium","new":"none"},{"seq":175208,"id":"CVE-2026-87577","ts":1789334884470,"field":"cvss","old":null,"new":"4.3"},{"seq":175207,"id":"CVE-2026-87577","ts":1789334884470,"field":"severity","old":"none","new":"medium"},{"seq":174003,"id":"CVE-2026-87577","ts":1789333703584,"field":"cvss","old":"4.3","new":null},{"seq":174002,"id":"CVE-2026-87577","ts":1789333703584,"field":"severity","old":"medium","new":"none"},{"seq":172817,"id":"CVE-2026-87577","ts":1789331096816,"field":"cvss","old":null,"new":"4.3"},{"seq":172816,"id":"CVE-2026-87577","ts":1789331096816,"field":"severity","old":"none","new":"medium"}]}