CVE-2026-87598

Опубликовано: 09 сент. 2026

Источник: redhat

CVSS3: 5.4

EPSS Низкий

Описание

Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

An incorrect authorization flaw was found in the ServiceWorker component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=499218516

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-940

https://bugzilla.redhat.com/show_bug.cgi?id=2530474chromium-browser: chromium-browser: Incorrect authorization in ServiceWorker

EPSS

Процентиль: 11%

0.00211

Низкий

5.4 Medium

CVSS3

Связанные уязвимости

CVE-2026-87598

CVSS3: 4.3

ubuntu

6 дней назад

(Incorrect authorization in ServiceWorker in Google Chrome prior to 153 ...)

CVE-2026-87598

CVSS3: 4.3

nvd

7 дней назад

Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-87598

CVSS3: 4.3

debian

7 дней назад

Incorrect authorization in ServiceWorker in Google Chrome prior to 153 ...

GHSA-r7mc-98mx-p9m8

CVSS3: 4.3

github

7 дней назад

Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

EPSS

Процентиль: 11%

0.00211

Низкий

5.4 Medium

CVSS3