CVE-2026-87583: Google Chrome vulnerability

Q: Which Chrome installations are affected?

Google Chrome on Android versions prior to 153.0.8010.36 are affected. The supplied information does not identify other platforms as affected.

Q: What does an attacker need to exploit this issue?

An attacker needs to cause a user to load a crafted HTML page. The issue allows spoofing of UI elements in Passwords.

Q: How can I remediate the issue?

Update Google Chrome on Android to version 153.0.8010.36 or later.

Published Sep 9, 2026

Updated

UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

Affected Software

1 affected component

Google Chrome<153.0.8010.36

Event History

Sep 9, 2026

CVE Published

via MITRE·12:10 AM

Data Sourced

via MITRE·12:10 AM

DescriptionWeakness

Frequently Asked Questions

Which Chrome installations are affected?

Google Chrome on Android versions prior to 153.0.8010.36 are affected. The supplied information does not identify other platforms as affected.

What does an attacker need to exploit this issue?

An attacker needs to cause a user to load a crafted HTML page. The issue allows spoofing of UI elements in Passwords.

How can I remediate the issue?

Update Google Chrome on Android to version 153.0.8010.36 or later.