Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-87652

Опубликовано: 09 сент. 2026
Источник: debian

Описание

Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Пакеты

ПакетСтатусВерсия исправленияРелизТип
chromiumunfixedpackage

Связанные уязвимости

CVSS3: 3.1
ubuntu
9 дней назад

Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 3.1
nvd
9 дней назад

Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

msrc
4 дня назад

Chromium CVE-2026-87652: Incorrect authorization in PushAPI

CVSS3: 3.1
github
9 дней назад

Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)