CVE-2026-87463: Incorrect authorization in Google Chrome
Description
Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted network traffic. (Chromium security severity: Low)
CVSS v3.1
Score 4.8medium
Affected software
Chrome
pkg:github/chromium/chromiumRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-87463 is an incorrect authorization vulnerability in the Certificate handling component of Google Chrome on Android. This flaw allows a remote attacker to potentially spoof the browser's address bar by sending crafted network traffic. The vulnerability affects versions prior to 153.0.8010.36. The Chromium security team has rated this issue as low severity. No CVSS score is provided. The vendor advisory linked corresponds to a stable channel update that presumably includes the fix.
Potential Impact
A remote attacker could exploit this vulnerability to spoof the address bar in Google Chrome on Android, potentially misleading users about the website they are visiting. This could facilitate phishing or other social engineering attacks. The severity is considered low, indicating limited impact or difficulty in exploitation.
Mitigation Recommendations
Users should update Google Chrome on Android to version 153.0.8010.36 or later, where this vulnerability is fixed. The vendor advisory indicates a stable channel update addressing this issue. No additional mitigation steps are specified or required.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Chrome
- Date Reserved
- 2026-09-08T22:37:44.052Z
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","vendor":"Google"}]
Threat ID: 6aa0b170acd9273b49810f8c
Added to database: 09/09/2026, 01:08:00 UTC
Last enriched: 09/09/2026, 03:53:17 UTC
Last updated: 10/23/2026, 15:10:15 UTC
Views: 27
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.