CVE-2026-87566: Google Chrome vulnerability

Q: What must an attacker do to exploit this issue?

An attacker must persuade a user to load a crafted HTML page remotely.

Q: What information could be exposed?

The issue could allow leakage of sensitive information through an observable discrepancy in Layout.

Q: Which Chrome versions are affected?

Google Chrome versions prior to 153.0.8010.36 are affected.

Published Sep 9, 2026

Updated

Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Chrome<153.0.8010.36

Event History

Sep 9, 2026

CVE Published

via MITRE·12:09 AM

Data Sourced

via MITRE·12:09 AM

DescriptionWeakness

Frequently Asked Questions

What must an attacker do to exploit this issue?

An attacker must persuade a user to load a crafted HTML page remotely.

What information could be exposed?

The issue could allow leakage of sensitive information through an observable discrepancy in Layout.

Which Chrome versions are affected?

Google Chrome versions prior to 153.0.8010.36 are affected.