CVE-2026-87495: Information leak in Google Chrome

This vulnerability involves an information leak in the Scroll feature of Google Chrome before version 153.0.8010.36. An attacker with control over the renderer process can exploit a crafted HTML page to leak data across origins, violating same-origin policy protections. The flaw is categorized as medium severity by Chromium security. The vendor advisory link is provided but does not explicitly confirm if a patch is available or if the issue is mitigated in the stated version.

The impact is limited to information disclosure across origins when the renderer process is compromised. This could allow an attacker to access data that should be isolated by the browser's security model. There is no indication of remote code execution or broader system compromise from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update to version 153.0.8010.36 or later once confirmed. No explicit vendor statement about required action or mitigation is provided in the advisory link.