CVE-2026-87642: Google Chrome vulnerability

Q: Who is exposed to this issue?

Users of Google Chrome versions prior to 153.0.8010.36 are affected when they visit an attacker-controlled crafted HTML page.

Q: What does an attacker need to exploit the vulnerability?

The attacker needs to persuade a victim to load a crafted HTML page remotely. The reported impact is leakage of cross-origin data through WebGL.

Q: What version resolves the issue?

Google Chrome 153.0.8010.36 addresses the vulnerability. Systems running an earlier Chrome version should be updated.

Published Sep 9, 2026

Updated

Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Chrome<153.0.8010.36

Event History

Sep 9, 2026

CVE Published

via MITRE·12:09 AM

Data Sourced

via MITRE·12:09 AM

DescriptionWeakness

Frequently Asked Questions

Who is exposed to this issue?

Users of Google Chrome versions prior to 153.0.8010.36 are affected when they visit an attacker-controlled crafted HTML page.

What does an attacker need to exploit the vulnerability?

The attacker needs to persuade a victim to load a crafted HTML page remotely. The reported impact is leakage of cross-origin data through WebGL.

What version resolves the issue?

Google Chrome 153.0.8010.36 addresses the vulnerability. Systems running an earlier Chrome version should be updated.