CVE-2026-87476: Incorrect authorization in Google Chrome

This vulnerability involves incorrect authorization checks in the Loader component of Google Chrome versions before 153.0.8010.36. Exploitation requires a remote attacker to deliver a specially crafted HTML page, which can lead to unauthorized disclosure of sensitive information. The vulnerability is classified with medium severity by the Chromium security team. The vendor has published an advisory but has not explicitly stated the remediation level or patch status in the provided data.

Successful exploitation allows a remote attacker to bypass authorization controls in the Loader, resulting in the disclosure of sensitive information. There is no indication of code execution or system compromise. The impact is limited to information disclosure.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html for current remediation guidance. Users and administrators should monitor this advisory for updates and apply any official fixes once available.