CVE-2026-87642 describes an uninitialized resource vulnerability in the WebGL component of Google Chrome versions before 153.0.8010.36. This flaw enables a remote attacker to leak data across origins by crafting a malicious HTML page. The vulnerability was assigned medium severity by Chromium security. The vendor advisory points to a stable channel update, implying that remediation is likely included in or after version 153.0.8010.36.

Successful exploitation could result in unauthorized disclosure of cross-origin data, potentially exposing sensitive information from other web origins. There is no indication of code execution or broader system compromise. No active exploitation has been reported.

Users should update Google Chrome to version 153.0.8010.36 or later, as this version addresses the vulnerability. Since this is a client-side browser issue, applying the update is the primary mitigation. Patch status is inferred from the vendor advisory referencing the stable channel update; users should verify they are running the updated version.