CyberRota Analysis
AI-GeneratedGoogle Chrome versions prior to 153.0.8010.36 are vulnerable to an incorrect authorization issue in the Navigation component, which allows remote attackers to spoof UI elements through a specially crafted HTML page. This could lead to phishing attacks or other malicious activities that exploit user trust in the browser interface. Organizations using affected versions should prioritize updating their Chrome installations to mitigate potential risks.
CVE
CVE-2026-87432
Severity
MEDIUM
CVSS
4.2
EPSS
0.24%
Chrome
Original NVD Description
Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)