CVE-2026-87627

Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted file. (Chromium security severity: Low)

Scoring

CVSS base score

1.5

EPSS probability

0.17%

CWE

CWE-436

Published

2026-09-09

Last modified

2026-09-09

Affected products

• Google Chrome

Weakness type

• CWE-436

Related vulnerabilities

• CVE-2026-88004 — Traefik entrypoint header-name sanitization bypassed via request trailers
• CVE-2026-82537 — Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatch
• CVE-2026-81378 — Visual Studio Code Security Feature Bypass Vulnerability
• CVE-2026-85184 — @fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request target
• CVE-2026-84394 — fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority
• CVE-2026-63435 — Mail: Email address spoofing via malformed RFC 2047 encoded-words
• CVE-2026-75931 — fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
• CVE-2026-57580 — authentik: Account Takeover via SAML NameID Comment Truncation

Markdown version · Browse all CVEs