CyberRota Analysis
AI-GeneratedGoogle Chrome versions prior to 153.0.8010.36 are vulnerable due to incorrect authorization in the Permissions feature, which can be exploited by remote attackers using social engineering tactics to access sensitive information through a malicious Chrome extension. Organizations and users relying on Chrome for sensitive operations should prioritize updating to the latest version to mitigate potential data breaches.
CVE
CVE-2026-87450
Severity
HIGH
CVSS
7.5
EPSS
0.31%
Chrome
Original NVD Description
Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)