{"id":"CVE-2026-87624","title":"UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page","summary":"UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)","severity":"medium","cvss":4.2,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-451"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T13:41:21.193","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87624","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/533044125","label":"chrome-cve-admin@google.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87624.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-87624"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87624"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T19:39:08.337563Z"},"epss":0.00224,"epssPercentile":0.11577,"scores":{"nvd":4.2,"vendor":3.9,"adp":4.2},"ingestedAt":"2026-09-09T01:17:17.505Z","slug":"CVE-2026-87624","body":"## Overview\n\nUI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87624.json)","depth":"sunlit","depthScore":23,"depthScoreParts":{"impact":23.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202559,"id":"CVE-2026-87624","ts":1789400085975,"field":"cvss","old":null,"new":"4.2"},{"seq":202558,"id":"CVE-2026-87624","ts":1789400085975,"field":"severity","old":"none","new":"medium"},{"seq":201286,"id":"CVE-2026-87624","ts":1789397620588,"field":"cvss","old":"4.2","new":null},{"seq":201285,"id":"CVE-2026-87624","ts":1789397620588,"field":"severity","old":"medium","new":"none"},{"seq":199979,"id":"CVE-2026-87624","ts":1789395578527,"field":"cvss","old":null,"new":"4.2"},{"seq":199978,"id":"CVE-2026-87624","ts":1789395578527,"field":"severity","old":"none","new":"medium"},{"seq":199218,"id":"CVE-2026-87624","ts":1789392260644,"field":"cvss","old":"4.2","new":null},{"seq":199217,"id":"CVE-2026-87624","ts":1789392260644,"field":"severity","old":"medium","new":"none"},{"seq":197551,"id":"CVE-2026-87624","ts":1789384297153,"field":"cvss","old":null,"new":"4.2"},{"seq":197550,"id":"CVE-2026-87624","ts":1789384297153,"field":"severity","old":"none","new":"medium"},{"seq":196825,"id":"CVE-2026-87624","ts":1789383779395,"field":"cvss","old":"4.2","new":null},{"seq":196824,"id":"CVE-2026-87624","ts":1789383779395,"field":"severity","old":"medium","new":"none"},{"seq":195729,"id":"CVE-2026-87624","ts":1789380578550,"field":"cvss","old":null,"new":"4.2"},{"seq":195728,"id":"CVE-2026-87624","ts":1789380578550,"field":"severity","old":"none","new":"medium"},{"seq":194680,"id":"CVE-2026-87624","ts":1789378789799,"field":"cvss","old":"4.2","new":null},{"seq":194679,"id":"CVE-2026-87624","ts":1789378789799,"field":"severity","old":"medium","new":"none"},{"seq":193467,"id":"CVE-2026-87624","ts":1789376521236,"field":"cvss","old":null,"new":"4.2"},{"seq":193466,"id":"CVE-2026-87624","ts":1789376521236,"field":"severity","old":"none","new":"medium"},{"seq":192254,"id":"CVE-2026-87624","ts":1789373639610,"field":"cvss","old":"4.2","new":null},{"seq":192253,"id":"CVE-2026-87624","ts":1789373639610,"field":"severity","old":"medium","new":"none"},{"seq":191039,"id":"CVE-2026-87624","ts":1789369489004,"field":"cvss","old":null,"new":"4.2"},{"seq":191038,"id":"CVE-2026-87624","ts":1789369489004,"field":"severity","old":"none","new":"medium"},{"seq":189826,"id":"CVE-2026-87624","ts":1789368461175,"field":"cvss","old":"4.2","new":null},{"seq":189825,"id":"CVE-2026-87624","ts":1789368461175,"field":"severity","old":"medium","new":"none"},{"seq":188609,"id":"CVE-2026-87624","ts":1789365237131,"field":"cvss","old":null,"new":"4.2"},{"seq":188608,"id":"CVE-2026-87624","ts":1789365237131,"field":"severity","old":"none","new":"medium"},{"seq":187396,"id":"CVE-2026-87624","ts":1789363480518,"field":"cvss","old":"4.2","new":null},{"seq":187395,"id":"CVE-2026-87624","ts":1789363480518,"field":"severity","old":"medium","new":"none"},{"seq":186182,"id":"CVE-2026-87624","ts":1789361235808,"field":"cvss","old":null,"new":"4.2"},{"seq":186181,"id":"CVE-2026-87624","ts":1789361235808,"field":"severity","old":"none","new":"medium"},{"seq":184969,"id":"CVE-2026-87624","ts":1789358381437,"field":"cvss","old":"4.2","new":null},{"seq":184968,"id":"CVE-2026-87624","ts":1789358381437,"field":"severity","old":"medium","new":"none"},{"seq":183218,"id":"CVE-2026-87624","ts":1789354323696,"field":"cvss","old":null,"new":"4.2"},{"seq":183217,"id":"CVE-2026-87624","ts":1789354323696,"field":"severity","old":"none","new":"medium"},{"seq":182011,"id":"CVE-2026-87624","ts":1789353335488,"field":"cvss","old":"4.2","new":null},{"seq":182010,"id":"CVE-2026-87624","ts":1789353335488,"field":"severity","old":"medium","new":"none"},{"seq":180804,"id":"CVE-2026-87624","ts":1789350291130,"field":"cvss","old":null,"new":"4.2"},{"seq":180803,"id":"CVE-2026-87624","ts":1789350291130,"field":"severity","old":"none","new":"medium"},{"seq":179597,"id":"CVE-2026-87624","ts":1789348308818,"field":"cvss","old":"4.2","new":null},{"seq":179596,"id":"CVE-2026-87624","ts":1789348308818,"field":"severity","old":"medium","new":"none"},{"seq":178390,"id":"CVE-2026-87624","ts":1789346378136,"field":"cvss","old":null,"new":"4.2"},{"seq":178389,"id":"CVE-2026-87624","ts":1789346378136,"field":"severity","old":"none","new":"medium"},{"seq":177183,"id":"CVE-2026-87624","ts":1789343188785,"field":"cvss","old":"4.2","new":null},{"seq":177182,"id":"CVE-2026-87624","ts":1789343188785,"field":"severity","old":"medium","new":"none"},{"seq":175300,"id":"CVE-2026-87624","ts":1789334884832,"field":"cvss","old":null,"new":"4.2"},{"seq":175299,"id":"CVE-2026-87624","ts":1789334884832,"field":"severity","old":"none","new":"medium"},{"seq":174095,"id":"CVE-2026-87624","ts":1789333703905,"field":"cvss","old":"4.2","new":null},{"seq":174094,"id":"CVE-2026-87624","ts":1789333703905,"field":"severity","old":"medium","new":"none"},{"seq":172909,"id":"CVE-2026-87624","ts":1789331097137,"field":"cvss","old":null,"new":"4.2"},{"seq":172908,"id":"CVE-2026-87624","ts":1789331097137,"field":"severity","old":"none","new":"medium"}]}