CVE-2026-87544

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-09-09 Modified: 2026-11-03 First seen: 2026-11-03 Status: pending_score

Description

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low)

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
Google Chrome 153.0.8010.36 < 153.0.8010.36

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.34%
Raw Score 0.003350
Percentile 27.3%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00335
2026-11-13
0.00335
2026-11-12
0.00335
2026-11-10
0.00335
2026-11-09
0.00335
2026-11-08
0.00335
2026-11-07
0.00335
2026-11-06
0.00335
2026-11-05
0.00335
2026-11-04
0.00335
2026-11-03
0.00335

Intelligence Sources

mitre ref →