CVE-2026-87482

Analyzed Analyzed - Analysis Complete

Cleartext Transmission of Sensitive Data in Google Chrome iOS HTTPS Upgrades

Publication date: 2026-09-09

Last updated on: 2026-09-10

Assigner: Chrome

Description

Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. (Chromium security severity: Medium)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-10

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-87482

EUVD

EUVD-2026-74340

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 153.0.8010.36 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-319	The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Attack-Flow Graph

Executive Summary

This vulnerability involves the transmission of sensitive data in cleartext within HttpsUpgrades in Google Chrome on iOS versions prior to 153.0.8010.36. A remote attacker could exploit this by crafting network traffic to leak sensitive information.

Detection Guidance

This vulnerability involves cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on iOS. Detection requires monitoring network traffic for unencrypted data sent by Chrome. Use packet capture tools like Wireshark or tcpdump to inspect traffic from Chrome on iOS devices. Check for HTTP requests or responses that should be encrypted but are not.

Impact Analysis

An attacker could intercept and read sensitive data transmitted by your browser, potentially exposing personal or confidential information like login credentials or financial details.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA due to unauthorized exposure of personal or health data, potentially resulting in legal penalties or reputational damage.

Mitigation Strategies

Update Google Chrome on iOS to version 153.0.8010.36 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-87482. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70