anonhaven

CVE-2026-87577

NONE
Updated Sep 09, 2026
Google
Parameter Value
Affected Versions before 153.0.8010.36
Type CWE-863 (Incorrect Authorization)
Vendor Google
Public PoC No

Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium)

Weakness Type (CWE)

CWE-863 Incorrect Authorization

References 2

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop…
chrome-cve-admin@google.com
https://issues.chromium.org/issues/501700023
chrome-cve-admin@google.com
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-79696

Google

10.0

CVE-2026-19778

Google

6.5

CVE-2026-87658

Google

None

CVE-2026-87657

Google

None

CVE-2026-87656

Google

None