CyberRota Analysis
AI-GeneratedA vulnerability in the Prerender feature of Google Chrome prior to version 153.0.8010.36 allows remote attackers to exploit a confused deputy scenario, potentially bypassing web origin policies through specially crafted HTML pages. This could lead to unauthorized access to sensitive data or actions within the browser. Organizations using affected versions of Chrome should prioritize updates to mitigate the risk of exploitation.
CVE
CVE-2026-87442
Severity
LOW
CVSS
3.1
EPSS
0.27%
Chrome
Original NVD Description
Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)