CVE-2026-87433
Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
Scoring
- CVSS base score
- 1.5
- CWE
- CWE-367
- Published
- 2026-09-09
- Last modified
- 2026-09-09
Affected products
- Google Chrome
Weakness type
Related vulnerabilities
- CVE-2026-79968 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-79730 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-87523 — Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...
- CVE-2026-87457 — Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local...
- CVE-2026-87554 — Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local...
- CVE-2026-87517 — Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote...
- CVE-2026-78464 — Windows MIDI Service Module Elevation of Privileges Vulnerability
- CVE-2026-69779 — Windows Win32k Elevation of Privilege Vulnerability