AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleCVE-2026-87436

Google Chrome: incomplete cleanup

Google

CVE-2026-87436 · Published Sep 9, 2026 · updated Sep 10, 2026

Medium6.5
Fix: upgrade to 153.0.8010.36 or later
Google advisory

Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 153.0.8010.36, < 153.0.8010.36153.0.8010.36
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Severity from
NVD
Weakness
CWE-459

More Google advisories

All Google
Medium 6.9Sep 9Google cel-go: excessive memory allocationCVE-2026-83530fixed in 0.29.0Medium 5.4Sep 9Google Chrome: clickjackingCVE-2026-87655fixed in 153.0.8010.36Medium 5.4Sep 9Google Chrome: remote attacker could bypass system access restrictionsCVE-2026-87656fixed in 153.0.8010.36Low 3.1Sep 9Google Chrome: use after freeCVE-2026-87657fixed in 153.0.8010.36Medium 4.3Sep 9Google Chrome: information disclosureCVE-2026-87658fixed in 153.0.8010.36Critical 9.6Sep 9Google Chrome: use after freeCVE-2026-87646fixed in 153.0.8010.36