PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-87546 Google CVE debrief

CVE-2026-87546 is a vulnerability in Google Chrome's Safebrowsing feature on Mac systems prior to version 153.0.8010.36. This issue, caused by incorrect type conversion or casting, allows a remote attacker to bypass system access restrictions via a crafted file. The vulnerability has a CVSS score of 4.3, indicating a medium severity level. Defenders responsible for managing Google Chrome installations on Mac systems should assess exposure and prioritize updating to version 153.0.8010.36 or later. The vulnerability details are based on the CVE Program record and the NVD vulnerability detail page. The source-specific vulnerability assessment indicates a medium severity level. To stay

Vendor
Google
Product
Chrome
CVSS
MEDIUM 4.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-09
Original CVE updated
2026-09-14
Advisory published
2026-09-09
Advisory updated
2026-09-14

Who should care

Defenders responsible for managing Google Chrome installations on Mac systems should assess exposure and prioritize updating to version 153.0.8010.36 or later.

Why it matters

CVE-2026-87546 is a medium-severity vulnerability in Google Chrome's Safebrowsing feature on Mac systems. Defenders should prioritize verifying and updating Google Chrome to version 153.0.8010.36 or later to prevent potential attacks.

  • Remote attackers may bypass system access restrictions via crafted files.
  • Defenders need to verify and update Google Chrome on Mac systems to prevent potential attacks.
  • System access restrictions may not be properly enforced, allowing unauthorized access.

Technical summary

The vulnerability is caused by incorrect type conversion or casting in Google Chrome's Safebrowsing feature on Mac systems prior to version 153.0.8010.36. This allows a remote attacker to bypass system access restrictions via a crafted file. The vulnerability has a medium severity level with a CVSS score of 4.3. Defenders should prioritize verifying and updating Google Chrome on Mac systems to version 153.0.8010.36 or later. The vulnerability details are based on the CVE Program record and the NVD vulnerability detail page.

Defensive priority

Defenders should prioritize verifying and updating Google Chrome on Mac systems to version 153.0.8010.36 or later.

Recommended defensive actions

  • Verify and update Google Chrome on Mac systems to version 153.0.8010.36 or later.
  • Review system access restrictions and ensure they are properly configured.
  • Monitor for potential crafted file attacks.

Evidence notes

The vulnerability details are based on the CVE Program record and the NVD vulnerability detail page. The source-specific vulnerability assessment indicates a medium severity level.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-87546 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-87546

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-87546 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-87546

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.