CVE-2026-87463: Google Google Chrome on Android vulnerability
Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted network traffic. (Chromium security severity: Low)
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Google Chrome on Android versions prior to 153.0.8010.36 are affected. The provided data does not identify any affected desktop or non-Android Chrome versions.
What does an attacker need to exploit this issue?
The issue can be triggered by crafted network traffic from a remote attacker. The provided data does not state that authentication, local access, or user interaction is required.
What is the potential impact?
A successful attack could potentially spoof the browser address bar, which may make a site appear to have a different address than it actually does.
How can I determine whether remediation is needed?
Check the installed Chrome version on affected Android devices. Devices running a version earlier than 153.0.8010.36 require an update.