CVE-2026-87447: Google Chrome vulnerability

Q: Which Chrome versions need to be updated?

Google Chrome versions prior to 153.0.8010.36 are affected. Update Chrome to 153.0.8010.36 or later.

Q: What does an attacker need to exploit this issue?

The attacker must use a crafted Chrome extension and rely on social engineering. The available information does not indicate that simply visiting a website is sufficient.

Q: What is the security impact of successful exploitation?

Successful exploitation can bypass Chrome's web origin policy, which is intended to isolate content from different web origins.

Published Sep 9, 2026

Updated

Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<153.0.8010.36

Event History

Sep 9, 2026

CVE Published

via MITRE·12:09 AM

Data Sourced

via MITRE·12:09 AM

DescriptionWeakness

Frequently Asked Questions

Which Chrome versions need to be updated?

Google Chrome versions prior to 153.0.8010.36 are affected. Update Chrome to 153.0.8010.36 or later.

What does an attacker need to exploit this issue?

The attacker must use a crafted Chrome extension and rely on social engineering. The available information does not indicate that simply visiting a website is sufficient.

What is the security impact of successful exploitation?

Successful exploitation can bypass Chrome's web origin policy, which is intended to isolate content from different web origins.