CVE-2026-87452: Google Chrome vulnerability

Q: What level of access does an attacker need before this issue can be exploited?

The attacker must already have compromised the Chrome renderer process. The described impact is then potential access to cross-origin data through a crafted HTML page.

Q: Which systems and Chrome versions are identified as affected?

The issue affects Google Chrome on Mac before version 153.0.8010.36. The provided information does not identify other operating systems or products as affected.

Published Sep 9, 2026

Updated

Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Chrome<153.0.8010.36

Event History

Sep 9, 2026

CVE Published

via MITRE·12:09 AM

Data Sourced

via MITRE·12:09 AM

DescriptionWeakness

Frequently Asked Questions

What level of access does an attacker need before this issue can be exploited?

The attacker must already have compromised the Chrome renderer process. The described impact is then potential access to cross-origin data through a crafted HTML page.

Which systems and Chrome versions are identified as affected?

The issue affects Google Chrome on Mac before version 153.0.8010.36. The provided information does not identify other operating systems or products as affected.