AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleCVE-2026-87486

Google Chrome: clickjacking

Google

CVE-2026-87486 · Published Sep 9, 2026 · updated Sep 10, 2026

Medium4.0
Fix: upgrade to 153.0.8010.36 or later
Google advisory

Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. (Chromium security severity: Medium)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 153.0.8010.36, < 153.0.8010.36153.0.8010.36
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-1021

More Google advisories

All Google
Medium 6.9Sep 9Google cel-go: excessive memory allocationCVE-2026-83530fixed in 0.29.0Medium 5.4Sep 9Google Chrome: clickjackingCVE-2026-87655fixed in 153.0.8010.36Medium 5.4Sep 9Google Chrome: remote attacker could bypass system access restrictionsCVE-2026-87656fixed in 153.0.8010.36Low 3.1Sep 9Google Chrome: use after freeCVE-2026-87657fixed in 153.0.8010.36Medium 4.3Sep 9Google Chrome: information disclosureCVE-2026-87658fixed in 153.0.8010.36Critical 9.6Sep 9Google Chrome: use after freeCVE-2026-87646fixed in 153.0.8010.36