CVE-2026-87522: Google Google Chrome vulnerability
Published Sep 9, 2026
·Updated
Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)
Affected Software
1 affected component
Google Google Chrome<153.0.8010.36
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome for Androidto a version that resolves this vulnerability.Fixed in 153.0.8010.36
Event History
Sep 9, 2026
CVE Published
via MITRE·12:10 AM
Data Sourced
via MITRE·12:10 AM
DescriptionWeakness
Frequently Asked Questions
1
Which deployments are affected?
Google Chrome on Android versions prior to 153.0.8010.36 are affected.
2
What would an attacker need to exploit this issue?
The attacker is remote and would need to leverage social engineering and crafted network traffic.
3
What is the available remediation?
Update Google Chrome on Android to version 153.0.8010.36 or later.