CVE-2026-87454
Analyzed Analyzed - Analysis Complete

Information Leak in Google Chrome on Windows

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Chrome

Description
Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-09
Last Modified
2026-09-09
Generated
2026-09-29
AI Q&A
2026-09-09
EPSS Evaluated
2026-09-27
NVD
CVE-2026-87454
EUVD
EUVD-2026-74399

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
google chrome to 153.0.8010.36 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an information leak in Google Chrome's Enterprise version on Windows. It allows a remote attacker to obtain sensitive information by exploiting a crafted HTML page. The issue has a medium severity rating from Chromium.

Detection Guidance

This vulnerability is specific to Google Chrome on Windows and involves an information leak via crafted HTML pages. Detection would typically involve checking Chrome version numbers and monitoring for suspicious HTML content. Since this is a client-side issue, network detection may not be straightforward. Check Chrome version with: chrome://version/ or command line: google-chrome --version. Ensure Chrome is updated to version 153.0.8010.36 or later.

Impact Analysis

If you use Google Chrome's Enterprise version on Windows prior to 153.0.8010.36, a malicious actor could trick you into visiting a specially crafted webpage. This could lead to the exposure of sensitive data stored in your browser or system.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements. Organizations must ensure affected systems are patched to maintain compliance.

Mitigation Strategies

Update Google Chrome to version 153.0.8010.36 or later to address the information leak vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-87454. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart