CVE-2026-87534: Google Google Chrome vulnerability

Q: Which deployments are affected?

Google Chrome on Android is affected when running a version earlier than 153.0.8010.36. The provided information does not identify any affected non-Android Chrome platforms.

Q: What does an attacker need to exploit this issue?

Exploitation requires crafted network traffic and relies on social engineering. The vulnerability could allow a remote attacker to bypass system access restrictions through the affected WebView authorization behavior.

Q: What is the remediation?

Update Google Chrome on Android to version 153.0.8010.36 or later.

Published Sep 9, 2026

Updated

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Google Chrome<153.0.8010.36

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Google Chrome for Android to a version that resolves this vulnerability.
Fixed in 153.0.8010.36

Event History

Sep 9, 2026

CVE Published

via MITRE·12:09 AM

Data Sourced

via MITRE·12:09 AM

DescriptionWeakness

Frequently Asked Questions

Which deployments are affected?

Google Chrome on Android is affected when running a version earlier than 153.0.8010.36. The provided information does not identify any affected non-Android Chrome platforms.

What does an attacker need to exploit this issue?