CVE-2026-87563

Опубликовано: 09 сент. 2026

Источник: debian

EPSS Низкий

Описание

Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
chromium	fixed	153.0.8010.47-1		package

EPSS

Процентиль: 6%

0.00164

Низкий

Связанные уязвимости

CVE-2026-87563

CVSS3: 4.3

ubuntu

10 дней назад

Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87563

CVSS3: 4.3

nvd

10 дней назад

Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87563

msrc

5 дней назад

Chromium CVE-2026-87563: Origin validation error in Paint

GHSA-vg7r-fpqr-4xpq

CVSS3: 4.3

github

10 дней назад

Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

EPSS

Процентиль: 6%

0.00164

Низкий