CVE-2026-87535
Medium · 6.5CVSS
6.5
EPSS
0.3%
Published
Sep 9, 2026
CISA due date
—
The record
Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|