{"id":"CVE-2026-87619","title":"Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page","summary":"Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-203"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-09","sourceUpdated":"2026-09-09T20:21:56.350","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87619","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/497433347","label":"chrome-cve-admin@google.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87619.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-87619"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87619"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87619"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"epss":0.00193,"epssPercentile":0.09282,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T17:27:46.918050Z"},"ingestedAt":"2026-09-09T01:17:17.506Z","slug":"CVE-2026-87619","body":"## Overview\n\nObservable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87619.json)","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202549,"id":"CVE-2026-87619","ts":1789400085926,"field":"cvss","old":null,"new":"4.3"},{"seq":202548,"id":"CVE-2026-87619","ts":1789400085926,"field":"severity","old":"none","new":"medium"},{"seq":201276,"id":"CVE-2026-87619","ts":1789397620552,"field":"cvss","old":"4.3","new":null},{"seq":201275,"id":"CVE-2026-87619","ts":1789397620552,"field":"severity","old":"medium","new":"none"},{"seq":199969,"id":"CVE-2026-87619","ts":1789395578491,"field":"cvss","old":null,"new":"4.3"},{"seq":199968,"id":"CVE-2026-87619","ts":1789395578491,"field":"severity","old":"none","new":"medium"},{"seq":199208,"id":"CVE-2026-87619","ts":1789392260608,"field":"cvss","old":"4.3","new":null},{"seq":199207,"id":"CVE-2026-87619","ts":1789392260608,"field":"severity","old":"medium","new":"none"},{"seq":197541,"id":"CVE-2026-87619","ts":1789384297121,"field":"cvss","old":null,"new":"4.3"},{"seq":197540,"id":"CVE-2026-87619","ts":1789384297121,"field":"severity","old":"none","new":"medium"},{"seq":196815,"id":"CVE-2026-87619","ts":1789383778741,"field":"cvss","old":"4.3","new":null},{"seq":196814,"id":"CVE-2026-87619","ts":1789383778741,"field":"severity","old":"medium","new":"none"},{"seq":195719,"id":"CVE-2026-87619","ts":1789380578517,"field":"cvss","old":null,"new":"4.3"},{"seq":195718,"id":"CVE-2026-87619","ts":1789380578517,"field":"severity","old":"none","new":"medium"},{"seq":194670,"id":"CVE-2026-87619","ts":1789378789761,"field":"cvss","old":"4.3","new":null},{"seq":194669,"id":"CVE-2026-87619","ts":1789378789761,"field":"severity","old":"medium","new":"none"},{"seq":193457,"id":"CVE-2026-87619","ts":1789376521201,"field":"cvss","old":null,"new":"4.3"},{"seq":193456,"id":"CVE-2026-87619","ts":1789376521201,"field":"severity","old":"none","new":"medium"},{"seq":192244,"id":"CVE-2026-87619","ts":1789373639576,"field":"cvss","old":"4.3","new":null},{"seq":192243,"id":"CVE-2026-87619","ts":1789373639576,"field":"severity","old":"medium","new":"none"},{"seq":191029,"id":"CVE-2026-87619","ts":1789369488964,"field":"cvss","old":null,"new":"4.3"},{"seq":191028,"id":"CVE-2026-87619","ts":1789369488964,"field":"severity","old":"none","new":"medium"},{"seq":189816,"id":"CVE-2026-87619","ts":1789368461141,"field":"cvss","old":"4.3","new":null},{"seq":189815,"id":"CVE-2026-87619","ts":1789368461141,"field":"severity","old":"medium","new":"none"},{"seq":188599,"id":"CVE-2026-87619","ts":1789365237097,"field":"cvss","old":null,"new":"4.3"},{"seq":188598,"id":"CVE-2026-87619","ts":1789365237097,"field":"severity","old":"none","new":"medium"},{"seq":187386,"id":"CVE-2026-87619","ts":1789363480484,"field":"cvss","old":"4.3","new":null},{"seq":187385,"id":"CVE-2026-87619","ts":1789363480484,"field":"severity","old":"medium","new":"none"},{"seq":186172,"id":"CVE-2026-87619","ts":1789361235774,"field":"cvss","old":null,"new":"4.3"},{"seq":186171,"id":"CVE-2026-87619","ts":1789361235774,"field":"severity","old":"none","new":"medium"},{"seq":184959,"id":"CVE-2026-87619","ts":1789358380727,"field":"cvss","old":"4.3","new":null},{"seq":184958,"id":"CVE-2026-87619","ts":1789358380727,"field":"severity","old":"medium","new":"none"},{"seq":183208,"id":"CVE-2026-87619","ts":1789354323656,"field":"cvss","old":null,"new":"4.3"},{"seq":183207,"id":"CVE-2026-87619","ts":1789354323656,"field":"severity","old":"none","new":"medium"},{"seq":182001,"id":"CVE-2026-87619","ts":1789353335453,"field":"cvss","old":"4.3","new":null},{"seq":182000,"id":"CVE-2026-87619","ts":1789353335453,"field":"severity","old":"medium","new":"none"},{"seq":180794,"id":"CVE-2026-87619","ts":1789350291096,"field":"cvss","old":null,"new":"4.3"},{"seq":180793,"id":"CVE-2026-87619","ts":1789350291096,"field":"severity","old":"none","new":"medium"},{"seq":179587,"id":"CVE-2026-87619","ts":1789348308784,"field":"cvss","old":"4.3","new":null},{"seq":179586,"id":"CVE-2026-87619","ts":1789348308784,"field":"severity","old":"medium","new":"none"},{"seq":178380,"id":"CVE-2026-87619","ts":1789346378101,"field":"cvss","old":null,"new":"4.3"},{"seq":178379,"id":"CVE-2026-87619","ts":1789346378101,"field":"severity","old":"none","new":"medium"},{"seq":177173,"id":"CVE-2026-87619","ts":1789343188750,"field":"cvss","old":"4.3","new":null},{"seq":177172,"id":"CVE-2026-87619","ts":1789343188750,"field":"severity","old":"medium","new":"none"},{"seq":175290,"id":"CVE-2026-87619","ts":1789334884793,"field":"cvss","old":null,"new":"4.3"},{"seq":175289,"id":"CVE-2026-87619","ts":1789334884793,"field":"severity","old":"none","new":"medium"},{"seq":174085,"id":"CVE-2026-87619","ts":1789333703871,"field":"cvss","old":"4.3","new":null},{"seq":174084,"id":"CVE-2026-87619","ts":1789333703871,"field":"severity","old":"medium","new":"none"},{"seq":172899,"id":"CVE-2026-87619","ts":1789331097102,"field":"cvss","old":null,"new":"4.3"},{"seq":172898,"id":"CVE-2026-87619","ts":1789331097102,"field":"severity","old":"none","new":"medium"}]}