CVE-2026-87635: Google Chrome vulnerability

Q: Who is exposed to this issue?

Users of Google Chrome versions earlier than 153.0.8010.36 are exposed when they visit an attacker-controlled crafted HTML page.

Q: What does an attacker need to exploit it?

The attacker needs to induce a user to load a crafted HTML page remotely; no additional access or local privileges are described.

Q: How can I determine whether remediation is needed?

Check the installed Google Chrome version. Versions prior to 153.0.8010.36 require an update to address this issue.

Published Sep 9, 2026

Updated

UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Chrome<153.0.8010.36

Event History

Sep 9, 2026

CVE Published

via MITRE·12:09 AM

Data Sourced

via MITRE·12:09 AM

DescriptionWeakness

Frequently Asked Questions

Who is exposed to this issue?

Users of Google Chrome versions earlier than 153.0.8010.36 are exposed when they visit an attacker-controlled crafted HTML page.

What does an attacker need to exploit it?

The attacker needs to induce a user to load a crafted HTML page remotely; no additional access or local privileges are described.

How can I determine whether remediation is needed?

Check the installed Google Chrome version. Versions prior to 153.0.8010.36 require an update to address this issue.