CVE-2026-87483
Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- EPSS probability
- 0.26%
- CWE
- CWE-863
- Published
- 2026-09-09
- Last modified
- 2026-09-10
Affected products
- Google Chrome
Weakness type
Related vulnerabilities
- CVE-2026-75624 — IBM App Connect Enterprise is vulnerable to privilege escalation and Denial of Service
- CVE-2026-85025 — Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
- CVE-2026-87107 — Consul vulnerable to an authorization bypass in the catalog deregistration path
- CVE-2026-87090 — Consul vulnerable to an authorization bypass in the catalog node-write path
- CVE-2026-88044 — rclone: RC per-server auth-proxy bypass
- CVE-2026-88939 — knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption
- CVE-2026-88008 — Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization
- CVE-2026-88007 — Traefik HTTP/3 Backend NTLM Connection Reuse