AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleCVE-2026-87511

Google Chrome: missing authorization

Google

CVE-2026-87511 · Published Sep 9, 2026 · updated Sep 15, 2026

Medium4.3
Fix: upgrade to 153.0.8010.36 or later
Google advisory

Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Low)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 153.0.8010.36, < 153.0.8010.36153.0.8010.36
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-862

More Google advisories

All Google
Medium 6.9Sep 9Google cel-go: excessive memory allocationCVE-2026-83530fixed in 0.29.0Medium 5.4Sep 9Google Chrome: clickjackingCVE-2026-87655fixed in 153.0.8010.36Medium 5.4Sep 9Google Chrome: remote attacker could bypass system access restrictionsCVE-2026-87656fixed in 153.0.8010.36Low 3.1Sep 9Google Chrome: use after freeCVE-2026-87657fixed in 153.0.8010.36Medium 4.3Sep 9Google Chrome: information disclosureCVE-2026-87658fixed in 153.0.8010.36Critical 9.6Sep 9Google Chrome: use after freeCVE-2026-87646fixed in 153.0.8010.36