CVE-2026-87432: Incorrect authorization in Google Chrome

This vulnerability in Google Chrome's navigation system allows an attacker with control over the renderer process to spoof user interface elements by crafting malicious HTML content. The flaw stems from incorrect authorization checks prior to version 153.0.8010.36. The issue is classified with medium severity by Chromium security. The vendor advisory linked does not explicitly confirm patch availability or remediation status.

A remote attacker who has already compromised the renderer process can exploit this vulnerability to spoof UI elements, potentially misleading users and facilitating further attacks such as phishing or social engineering. The impact is limited to scenarios where the renderer process is compromised, and the vulnerability does not itself provide direct remote code execution or privilege escalation.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and apply updates promptly once a fix is confirmed.