CVE-2026-87470
Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.6
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
- EPSS probability
- 0.40%
- CWE
- CWE-1284
- Published
- 2026-09-09
- Last modified
- 2026-09-10
Affected products
- Google Chrome
Weakness type
Related vulnerabilities
- CVE-2026-87962 — t-digest 3.1 through 3.3 Denial of Service via Unvalidated Length Fields in MergingDigest.fromBytes
- CVE-2026-87735 — An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an...
- CVE-2026-16025 — Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module
- CVE-2026-85201 — In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a...
- CVE-2026-82750 — Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation
- CVE-2026-82751 — Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning
- CVE-2026-82752 — Ash string length constraints count graphemes, so a combining-mark string of any size passes max_length
- CVE-2026-53720 — pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small