CVE-2026-87518: Google Chrome for iOS vulnerability

Q: What access does an attacker need to exploit this issue?

The attacker must already have compromised the Chrome renderer process and then use a crafted HTML page. The provided information does not indicate that visiting a malicious page alone is sufficient.

Q: Which Chrome for iOS versions are affected?

Google Chrome for iOS versions prior to 153.0.8010.36 are affected. Updating to version 153.0.8010.36 or later addresses the affected version range.

Q: What type of information could be exposed?

The issue could potentially allow disclosure of sensitive information through an observable Safe Browsing discrepancy. The provided information does not specify the particular data types that may be exposed.

Published Sep 9, 2026

Updated

Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Chrome for iOS<153.0.8010.36

Event History

Sep 9, 2026

CVE Published

via MITRE·12:09 AM

Data Sourced

via MITRE·12:09 AM

DescriptionWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attacker must already have compromised the Chrome renderer process and then use a crafted HTML page. The provided information does not indicate that visiting a malicious page alone is sufficient.

Which Chrome for iOS versions are affected?

Google Chrome for iOS versions prior to 153.0.8010.36 are affected. Updating to version 153.0.8010.36 or later addresses the affected version range.

What type of information could be exposed?

The issue could potentially allow disclosure of sensitive information through an observable Safe Browsing discrepancy. The provided information does not specify the particular data types that may be exposed.