CVE-2026-87531 is an information disclosure vulnerability in the CORS mechanism of Google Chrome before version 153.0.8010.36. An attacker with control over the renderer process can exploit this flaw to access data from other origins via a specially crafted HTML page. This vulnerability is categorized under CWE-200 (Information Exposure). There is no CVSS score or detailed vendor advisory provided in the input data, and no known exploits in the wild have been reported.

If exploited, this vulnerability could allow an attacker who has compromised the renderer process to bypass same-origin policy protections and access sensitive cross-origin data. This could lead to unauthorized disclosure of information accessible within the browser context. The impact is limited to scenarios where the attacker already controls the renderer process.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability affects versions prior to 153.0.8010.36, updating to version 153.0.8010.36 or later is likely the intended remediation once confirmed by the vendor. Until official guidance is available, no specific mitigation steps can be recommended.