CVE-2026-87644 describes an incorrect authorization issue in the Views component of Google Chrome on Windows platforms before version 153.0.8010.36. An attacker who has compromised the renderer process and leveraged social engineering techniques could exploit this vulnerability by delivering a crafted HTML page, enabling execution of arbitrary code outside the sandbox environment. This vulnerability is related to CWE-863 (Incorrect Authorization). No CVSS score or patch information is currently provided.

If exploited, this vulnerability could allow an attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox, potentially increasing the attacker's privileges and control on the affected system. However, exploitation requires prior compromise of the renderer process and social engineering, which limits the attack vector. The Chromium security team rates this as a medium severity issue.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update Google Chrome to version 153.0.8010.36 or later once available. Until then, be cautious of social engineering attempts and avoid interacting with untrusted HTML content. No official fix or temporary workaround is currently documented.