{"id":"CVE-2026-87641","title":"Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page","summary":"Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)","severity":"medium","cvss":4.2,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cwe":["CWE-362"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T15:17:53.507","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87641","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/523091391","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T14:05:45.690519Z"},"scores":{"nvd":4.2,"adp":5.3},"epss":0.00136,"epssPercentile":0.03399,"ingestedAt":"2026-09-09T01:17:17.508Z","slug":"CVE-2026-87641","body":"## Overview\n\nRace condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"sunlit","depthScore":23,"depthScoreParts":{"impact":23.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202593,"id":"CVE-2026-87641","ts":1789400086145,"field":"cvss","old":null,"new":"4.2"},{"seq":202592,"id":"CVE-2026-87641","ts":1789400086145,"field":"severity","old":"none","new":"medium"},{"seq":201320,"id":"CVE-2026-87641","ts":1789397620718,"field":"cvss","old":"4.2","new":null},{"seq":201319,"id":"CVE-2026-87641","ts":1789397620718,"field":"severity","old":"medium","new":"none"},{"seq":200013,"id":"CVE-2026-87641","ts":1789395578653,"field":"cvss","old":null,"new":"4.2"},{"seq":200012,"id":"CVE-2026-87641","ts":1789395578653,"field":"severity","old":"none","new":"medium"},{"seq":199250,"id":"CVE-2026-87641","ts":1789392260774,"field":"cvss","old":"4.2","new":null},{"seq":199249,"id":"CVE-2026-87641","ts":1789392260774,"field":"severity","old":"medium","new":"none"},{"seq":197583,"id":"CVE-2026-87641","ts":1789384297271,"field":"cvss","old":null,"new":"4.2"},{"seq":197582,"id":"CVE-2026-87641","ts":1789384297271,"field":"severity","old":"none","new":"medium"},{"seq":196857,"id":"CVE-2026-87641","ts":1789383781875,"field":"cvss","old":"4.2","new":null},{"seq":196856,"id":"CVE-2026-87641","ts":1789383781875,"field":"severity","old":"medium","new":"none"},{"seq":195761,"id":"CVE-2026-87641","ts":1789380578671,"field":"cvss","old":null,"new":"4.2"},{"seq":195760,"id":"CVE-2026-87641","ts":1789380578671,"field":"severity","old":"none","new":"medium"},{"seq":194712,"id":"CVE-2026-87641","ts":1789378789925,"field":"cvss","old":"4.2","new":null},{"seq":194711,"id":"CVE-2026-87641","ts":1789378789925,"field":"severity","old":"medium","new":"none"},{"seq":193499,"id":"CVE-2026-87641","ts":1789376521484,"field":"cvss","old":null,"new":"4.2"},{"seq":193498,"id":"CVE-2026-87641","ts":1789376521484,"field":"severity","old":"none","new":"medium"},{"seq":192286,"id":"CVE-2026-87641","ts":1789373639736,"field":"cvss","old":"4.2","new":null},{"seq":192285,"id":"CVE-2026-87641","ts":1789373639736,"field":"severity","old":"medium","new":"none"},{"seq":191071,"id":"CVE-2026-87641","ts":1789369489151,"field":"cvss","old":null,"new":"4.2"},{"seq":191070,"id":"CVE-2026-87641","ts":1789369489151,"field":"severity","old":"none","new":"medium"},{"seq":189858,"id":"CVE-2026-87641","ts":1789368461299,"field":"cvss","old":"4.2","new":null},{"seq":189857,"id":"CVE-2026-87641","ts":1789368461299,"field":"severity","old":"medium","new":"none"},{"seq":188641,"id":"CVE-2026-87641","ts":1789365237255,"field":"cvss","old":null,"new":"4.2"},{"seq":188640,"id":"CVE-2026-87641","ts":1789365237255,"field":"severity","old":"none","new":"medium"},{"seq":187428,"id":"CVE-2026-87641","ts":1789363480642,"field":"cvss","old":"4.2","new":null},{"seq":187427,"id":"CVE-2026-87641","ts":1789363480642,"field":"severity","old":"medium","new":"none"},{"seq":186214,"id":"CVE-2026-87641","ts":1789361235931,"field":"cvss","old":null,"new":"4.2"},{"seq":186213,"id":"CVE-2026-87641","ts":1789361235931,"field":"severity","old":"none","new":"medium"},{"seq":185001,"id":"CVE-2026-87641","ts":1789358383948,"field":"cvss","old":"4.2","new":null},{"seq":185000,"id":"CVE-2026-87641","ts":1789358383948,"field":"severity","old":"medium","new":"none"},{"seq":183250,"id":"CVE-2026-87641","ts":1789354323839,"field":"cvss","old":null,"new":"4.2"},{"seq":183249,"id":"CVE-2026-87641","ts":1789354323839,"field":"severity","old":"none","new":"medium"},{"seq":182043,"id":"CVE-2026-87641","ts":1789353335626,"field":"cvss","old":"4.2","new":null},{"seq":182042,"id":"CVE-2026-87641","ts":1789353335626,"field":"severity","old":"medium","new":"none"},{"seq":180836,"id":"CVE-2026-87641","ts":1789350291253,"field":"cvss","old":null,"new":"4.2"},{"seq":180835,"id":"CVE-2026-87641","ts":1789350291253,"field":"severity","old":"none","new":"medium"},{"seq":179629,"id":"CVE-2026-87641","ts":1789348308949,"field":"cvss","old":"4.2","new":null},{"seq":179628,"id":"CVE-2026-87641","ts":1789348308949,"field":"severity","old":"medium","new":"none"},{"seq":178422,"id":"CVE-2026-87641","ts":1789346378258,"field":"cvss","old":null,"new":"4.2"},{"seq":178421,"id":"CVE-2026-87641","ts":1789346378258,"field":"severity","old":"none","new":"medium"},{"seq":177215,"id":"CVE-2026-87641","ts":1789343188916,"field":"cvss","old":"4.2","new":null},{"seq":177214,"id":"CVE-2026-87641","ts":1789343188916,"field":"severity","old":"medium","new":"none"},{"seq":175332,"id":"CVE-2026-87641","ts":1789334884974,"field":"cvss","old":null,"new":"4.2"},{"seq":175331,"id":"CVE-2026-87641","ts":1789334884974,"field":"severity","old":"none","new":"medium"},{"seq":174127,"id":"CVE-2026-87641","ts":1789333704032,"field":"cvss","old":"4.2","new":null},{"seq":174126,"id":"CVE-2026-87641","ts":1789333704032,"field":"severity","old":"medium","new":"none"},{"seq":172941,"id":"CVE-2026-87641","ts":1789331097259,"field":"cvss","old":null,"new":"4.2"},{"seq":172940,"id":"CVE-2026-87641","ts":1789331097259,"field":"severity","old":"none","new":"medium"}]}