CVE-2026-87626
EUVD-2026-7442909.09.2026, 01:17
Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| chrome | 𝑥 < 153.0.8010.36 | CNA |
Debian Releases
Vulnerability Media Exposure