AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleCVE-2026-87472

Google Chrome: improper input validation

Google

CVE-2026-87472 · Published Sep 9, 2026 · updated Sep 10, 2026

Medium4.2
Fix: upgrade to 153.0.8010.36 or later
Google advisory

Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 153.0.8010.36, < 153.0.8010.36153.0.8010.36
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-20

More Google advisories

All Google
Medium 6.9Sep 9Google cel-go: excessive memory allocationCVE-2026-83530fixed in 0.29.0Medium 5.4Sep 9Google Chrome: clickjackingCVE-2026-87655fixed in 153.0.8010.36Medium 5.4Sep 9Google Chrome: remote attacker could bypass system access restrictionsCVE-2026-87656fixed in 153.0.8010.36Low 3.1Sep 9Google Chrome: use after freeCVE-2026-87657fixed in 153.0.8010.36Medium 4.3Sep 9Google Chrome: information disclosureCVE-2026-87658fixed in 153.0.8010.36Critical 9.6Sep 9Google Chrome: use after freeCVE-2026-87646fixed in 153.0.8010.36