CVE-2026-87517 is a race condition vulnerability affecting Google Chrome on iOS platforms before version 153.0.8010.36. The issue enables a remote attacker to bypass the web origin policy by leveraging social engineering techniques and a specially crafted HTML page. The web origin policy is a critical security mechanism that restricts how documents or scripts loaded from one origin can interact with resources from another origin. The vulnerability is marked as high severity by Chromium security. There is no explicit information on remediation or patch availability in the provided data, though the affected version is identified as exactly 153.0.8010.36, suggesting that this version may be the fixed release.

The vulnerability allows bypassing the web origin policy, potentially enabling unauthorized access or interaction with web content across origins. This can lead to security breaches such as data leakage or unauthorized actions within the browser context. However, exploitation requires social engineering and a crafted HTML page, indicating user interaction is necessary.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vendor advisory URL provided should be monitored for updates. Users should update Google Chrome on iOS to version 153.0.8010.36 or later once confirmed as fixed by the vendor.