CVE-2026-87439: Information leak in Google Chrome

CVE-2026-87439 is an information leak vulnerability in the ServiceWorker feature of Google Chrome before version 153.0.8010.36. It enables a remote attacker with control over the renderer process to extract sensitive data via a specially crafted HTML page. The vulnerability has been publicly disclosed but lacks a confirmed CVSS score and explicit remediation details in the provided data. The vendor advisory link points to a Chrome stable channel update, which likely addresses this issue.

If exploited, this vulnerability could allow an attacker who has compromised the renderer process to access sensitive information that should otherwise be protected. This could lead to privacy breaches or further exploitation depending on the nature of the leaked data. The impact is considered medium severity by Chromium security standards.

The vendor advisory linked suggests that a stable channel update for Chrome is available, implying that an official fix likely exists in version 153.0.8010.36 or later. Users should update to this version or later to remediate the vulnerability. Patch status is not explicitly confirmed in the input data; therefore, users should consult the vendor advisory for the latest remediation guidance.