Information disclosure in Google Chromium - CVE-2026-87477
Published: September 9, 2026
Vulnerability identifier: #VU148698
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-87477
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to disclose sensitive information.
The vulnerability exists due to an unspecified information disclosure flaw in Chrome Core when a user interacts with content processed by Chrome. A remote attacker can cause a user to interact with content processed by Chrome to disclose sensitive information.
Affected software
Google Chromium
Microsoft Edge
Google Chrome
Debian Linux
chromium (Debian package)
Microsoft Edge
Google Chrome
Debian Linux
chromium (Debian package)
How to mitigate CVE-2026-87477
Install security update from vendor's website.
Google Chromium - update to 153.0.8010.36
Microsoft Edge - update to 153.0.4234.32
Google Chrome - update to 153.0.8010.36
chromium (Debian package) - update to 153.0.8010.47-2~deb13u1
Microsoft Edge - update to 153.0.4234.32
Google Chrome - update to 153.0.8010.36
chromium (Debian package) - update to 153.0.8010.47-2~deb13u1