{"id":"CVE-2026-87656","title":"Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page","summary":"Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cwe":["CWE-754"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-14","sourceUpdated":"2026-09-14T13:18:59.723","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87656","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/513245072","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-14T12:33:12.352922Z"},"epss":0.00171,"epssPercentile":0.06811,"ingestedAt":"2026-09-09T01:17:17.506Z","slug":"CVE-2026-87656","body":"## Overview\n\nImproper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202623,"id":"CVE-2026-87656","ts":1789400086285,"field":"cvss","old":null,"new":"5.4"},{"seq":202622,"id":"CVE-2026-87656","ts":1789400086285,"field":"severity","old":"none","new":"medium"},{"seq":201350,"id":"CVE-2026-87656","ts":1789397620823,"field":"cvss","old":"5.4","new":null},{"seq":201349,"id":"CVE-2026-87656","ts":1789397620823,"field":"severity","old":"medium","new":"none"},{"seq":200043,"id":"CVE-2026-87656","ts":1789395578759,"field":"cvss","old":null,"new":"5.4"},{"seq":200042,"id":"CVE-2026-87656","ts":1789395578759,"field":"severity","old":"none","new":"medium"},{"seq":199280,"id":"CVE-2026-87656","ts":1789392260879,"field":"cvss","old":"5.4","new":null},{"seq":199279,"id":"CVE-2026-87656","ts":1789392260879,"field":"severity","old":"medium","new":"none"},{"seq":197613,"id":"CVE-2026-87656","ts":1789384297367,"field":"cvss","old":null,"new":"5.4"},{"seq":197612,"id":"CVE-2026-87656","ts":1789384297367,"field":"severity","old":"none","new":"medium"},{"seq":196887,"id":"CVE-2026-87656","ts":1789383783697,"field":"cvss","old":"5.4","new":null},{"seq":196886,"id":"CVE-2026-87656","ts":1789383783697,"field":"severity","old":"medium","new":"none"},{"seq":195791,"id":"CVE-2026-87656","ts":1789380578771,"field":"cvss","old":null,"new":"5.4"},{"seq":195790,"id":"CVE-2026-87656","ts":1789380578771,"field":"severity","old":"none","new":"medium"},{"seq":194742,"id":"CVE-2026-87656","ts":1789378790028,"field":"cvss","old":"5.4","new":null},{"seq":194741,"id":"CVE-2026-87656","ts":1789378790028,"field":"severity","old":"medium","new":"none"},{"seq":193529,"id":"CVE-2026-87656","ts":1789376521900,"field":"cvss","old":null,"new":"5.4"},{"seq":193528,"id":"CVE-2026-87656","ts":1789376521900,"field":"severity","old":"none","new":"medium"},{"seq":192316,"id":"CVE-2026-87656","ts":1789373639838,"field":"cvss","old":"5.4","new":null},{"seq":192315,"id":"CVE-2026-87656","ts":1789373639838,"field":"severity","old":"medium","new":"none"},{"seq":191101,"id":"CVE-2026-87656","ts":1789369489274,"field":"cvss","old":null,"new":"5.4"},{"seq":191100,"id":"CVE-2026-87656","ts":1789369489274,"field":"severity","old":"none","new":"medium"},{"seq":189888,"id":"CVE-2026-87656","ts":1789368461403,"field":"cvss","old":"5.4","new":null},{"seq":189887,"id":"CVE-2026-87656","ts":1789368461403,"field":"severity","old":"medium","new":"none"},{"seq":188671,"id":"CVE-2026-87656","ts":1789365237353,"field":"cvss","old":null,"new":"5.4"},{"seq":188670,"id":"CVE-2026-87656","ts":1789365237353,"field":"severity","old":"none","new":"medium"},{"seq":187458,"id":"CVE-2026-87656","ts":1789363480746,"field":"cvss","old":"5.4","new":null},{"seq":187457,"id":"CVE-2026-87656","ts":1789363480746,"field":"severity","old":"medium","new":"none"},{"seq":186244,"id":"CVE-2026-87656","ts":1789361236034,"field":"cvss","old":null,"new":"5.4"},{"seq":186243,"id":"CVE-2026-87656","ts":1789361236034,"field":"severity","old":"none","new":"medium"},{"seq":185031,"id":"CVE-2026-87656","ts":1789358386020,"field":"cvss","old":"5.4","new":null},{"seq":185030,"id":"CVE-2026-87656","ts":1789358386020,"field":"severity","old":"medium","new":"none"},{"seq":183280,"id":"CVE-2026-87656","ts":1789354323958,"field":"cvss","old":null,"new":"5.4"},{"seq":183279,"id":"CVE-2026-87656","ts":1789354323958,"field":"severity","old":"none","new":"medium"},{"seq":182073,"id":"CVE-2026-87656","ts":1789353335731,"field":"cvss","old":"5.4","new":null},{"seq":182072,"id":"CVE-2026-87656","ts":1789353335731,"field":"severity","old":"medium","new":"none"},{"seq":180866,"id":"CVE-2026-87656","ts":1789350291355,"field":"cvss","old":null,"new":"5.4"},{"seq":180865,"id":"CVE-2026-87656","ts":1789350291355,"field":"severity","old":"none","new":"medium"},{"seq":179659,"id":"CVE-2026-87656","ts":1789348309058,"field":"cvss","old":"5.4","new":null},{"seq":179658,"id":"CVE-2026-87656","ts":1789348309058,"field":"severity","old":"medium","new":"none"},{"seq":178452,"id":"CVE-2026-87656","ts":1789346378359,"field":"cvss","old":null,"new":"5.4"},{"seq":178451,"id":"CVE-2026-87656","ts":1789346378359,"field":"severity","old":"none","new":"medium"},{"seq":177245,"id":"CVE-2026-87656","ts":1789343189021,"field":"cvss","old":"5.4","new":null},{"seq":177244,"id":"CVE-2026-87656","ts":1789343189021,"field":"severity","old":"medium","new":"none"},{"seq":175362,"id":"CVE-2026-87656","ts":1789334885092,"field":"cvss","old":null,"new":"5.4"},{"seq":175361,"id":"CVE-2026-87656","ts":1789334885092,"field":"severity","old":"none","new":"medium"},{"seq":174157,"id":"CVE-2026-87656","ts":1789333704148,"field":"cvss","old":"5.4","new":null},{"seq":174156,"id":"CVE-2026-87656","ts":1789333704148,"field":"severity","old":"medium","new":"none"},{"seq":172971,"id":"CVE-2026-87656","ts":1789331097361,"field":"cvss","old":null,"new":"5.4"},{"seq":172970,"id":"CVE-2026-87656","ts":1789331097361,"field":"severity","old":"none","new":"medium"}]}