PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-87544 Google CVE debrief

CVE-2026-87544 is a critical vulnerability in Google Chrome prior to version 153.0.8010.36, allowing remote attackers to bypass system access restrictions via a crafted HTML page. The vulnerability has a CVSS score of 9.8 and is classified as CRITICAL. Chrome users, particularly those with high-security requirements, should assess their exposure and update to version 153.0.8010.36 or later. This vulnerability affects Google Chrome's Extensions, enabling attackers to bypass system access restrictions. Verification of affected systems and Chrome versions is required. The CVE record and NVD entry provide details on the vulnerability, but further verification is required to determine

Vendor
Google
Product
Chrome
CVSS
CRITICAL 9.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-09
Original CVE updated
2026-09-14
Advisory published
2026-09-09
Advisory updated
2026-09-14

Who should care

Chrome users, particularly those with high-security requirements, should assess their exposure and update to version 153.0.8010.36 or later.

Why it matters

CVE-2026-87544 is a critical vulnerability in Google Chrome that allows remote attackers to bypass system access restrictions. Chrome users, particularly those with high-security requirements, should assess their exposure and update to version 153.0.8010.36 or later.

  • Remote attackers can bypass system access restrictions
  • Potential for unauthorized access to sensitive information
  • Requires verification of affected systems and Chrome versions
  • High priority for Chrome users to update to version 153.0.8010.36 or later

Technical summary

The vulnerability is caused by incorrect authorization in Extensions in Google Chrome prior to version 153.0.8010.36, allowing remote attackers to bypass system access restrictions via a crafted HTML page. This issue is related to Google Chrome's Extensions feature, which did not properly enforce authorization, leading to potential unauthorized access. Chrome users should update to version 153.0.8010.36 or later to mitigate this vulnerability. The vulnerability's impact includes the potential for unauthorized access to sensitive information and requires high-p

Defensive priority

High priority for Chrome users to update to version 153.0.8010.36 or later

Recommended defensive actions

  • Update Google Chrome to version 153.0.8010.36 or later
  • Review system access restrictions and ensure they are properly configured
  • Monitor for suspicious activity related to crafted HTML pages

Evidence notes

The vulnerability is caused by incorrect authorization in Extensions in Google Chrome. The CVE record and NVD entry provide details on the vulnerability, but further verification is required to determine the full scope of affected systems.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-87544 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-87544

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-87544 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-87544

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.