CVE-2026-87590: Input Validation

Q: Which Chrome versions need to be updated?

Google Chrome versions prior to 153.0.8010.36 are affected. Update to 153.0.8010.36 or a later version.

Q: What must an attacker do to exploit this issue?

The issue can potentially be exploited remotely using crafted network traffic. The available information does not state that the attacker needs local access or prior authentication.

Q: What is the potential impact?

Successful exploitation could potentially leak sensitive information through Chrome's Passwords functionality.

Published Sep 9, 2026

Updated

Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Google Chrome<153.0.8010.36

Event History

Sep 9, 2026

CVE Published

via MITRE·12:09 AM

Data Sourced

via MITRE·12:09 AM

DescriptionWeakness

Frequently Asked Questions

Which Chrome versions need to be updated?

Google Chrome versions prior to 153.0.8010.36 are affected. Update to 153.0.8010.36 or a later version.

What must an attacker do to exploit this issue?

The issue can potentially be exploited remotely using crafted network traffic. The available information does not state that the attacker needs local access or prior authentication.

What is the potential impact?

Successful exploitation could potentially leak sensitive information through Chrome's Passwords functionality.