CVE-2026-87503

Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

Scoring

CVSS base score

1.5

CWE

CWE-841

Published

2026-09-09

Last modified

2026-09-09

Affected products

• Google Chrome

Weakness type

• CWE-841

Related vulnerabilities

• CVE-2026-53637 — Sylius: Cart FormComponent allows modification or deletion of an already-completed order
• CVE-2026-67279 — SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
• CVE-2026-82423 — macrozheng mall Payment Status Endpoint paySuccess behavioral workflow
• CVE-2026-55763 — Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits
• CVE-2026-78103 — Dimension Log Server Configuration Lock Bypass Vulnerability
• CVE-2026-78618 — Dimension Business Logic Flaw Allows Chained Backend Object Operations
• CVE-2026-77508 — Weblate: Unverified REST API email changes
• CVE-2026-15365 — A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification...

Markdown version · Browse all CVEs