Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-87608

Опубликовано: 09 сент. 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 153.0.8010.36 (исключая)

EPSS

Процентиль: 11%
0.00206
Низкий

7.5 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 7.5
ubuntu
10 дней назад

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)

msrc
4 дня назад

Chromium CVE-2026-87608: Improper certificate validation in FedCM

CVSS3: 7.5
debian
10 дней назад

Improper certificate validation in FedCM in Google Chrome prior to 153 ...

CVSS3: 7.5
github
10 дней назад

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)

EPSS

Процентиль: 11%
0.00206
Низкий

7.5 High

CVSS3

Дефекты

CWE-295