CVE-2026-87571

Modified Modified - Updated After Analysis

Improper Certificate Validation in Google Chrome Loader

Publication date: 2026-09-09

Last updated on: 2026-09-14

Assigner: Chrome

Description

Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-14

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-87571

EUVD

EUVD-2026-74471

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 153.0.8010.36 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-295	The product does not validate, or incorrectly validates, a certificate.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper certificate validation in Google Chrome's Loader component. It allows a remote attacker to bypass web origin policy through crafted network traffic, potentially tricking users into interacting with malicious content via social engineering tactics.

Detection Guidance

This vulnerability involves improper certificate validation in Google Chrome. Detection requires checking Chrome version and monitoring for unusual certificate validation behavior. Update Chrome to version 153.0.8010.36 or later to mitigate the issue.

Impact Analysis

An attacker could exploit this to impersonate legitimate websites, leading to phishing attacks, credential theft, or unauthorized access to sensitive user data. Users might unknowingly interact with malicious sites due to the bypass of origin policy.

Compliance Impact

This vulnerability could lead to unauthorized data exposure or breaches, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Organizations may face compliance penalties if user data is compromised through such attacks.

Mitigation Strategies

Update Google Chrome to version 153.0.8010.36 or later to address the improper certificate validation issue.

Hi! I’m here to help you understand CVE-2026-87571. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70