CVE-2026-87535

Analyzed Analyzed - Analysis Complete

Information Loss in Google Chrome Safebrowsing on Mac

Publication date: 2026-09-09

Last updated on: 2026-09-10

Assigner: Chrome

Description

Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-10

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-87535

EUVD

EUVD-2026-74401

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 153.0.8010.36 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-221	The product does not record, or improperly records, security-relevant information that leads to an incorrect decision or hampers later analysis.

Attack-Flow Graph

Executive Summary

This vulnerability involves information loss or omission in Safebrowsing in Google Chrome on Mac. It allows a remote attacker to bypass system access restrictions by using a crafted HTML page. The issue was present in Chrome versions prior to 153.0.8010.36.

Detection Guidance

This vulnerability is specific to Google Chrome on Mac and involves information loss in Safebrowsing. Detection would require checking the Chrome version and examining HTML pages for crafted content. No direct commands are provided in the context to detect this issue.

Impact Analysis

This vulnerability could allow an attacker to bypass security restrictions, potentially leading to unauthorized access to sensitive data or systems. Users on Mac with outdated Chrome versions may be at risk of such attacks.

Compliance Impact

The vulnerability allows a remote attacker to bypass system access restrictions via a crafted HTML page, which could lead to unauthorized data exposure or loss. This may impact compliance with GDPR by potentially violating data protection principles or HIPAA by compromising protected health information if sensitive data is involved.

Mitigation Strategies

Update Google Chrome to version 153.0.8010.36 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-87535. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70