This vulnerability (CVE-2026-87560) involves a missing authorization check in the Browser component of Google Chrome before version 153.0.8010.36. An attacker can exploit this flaw by crafting a malicious HTML page that bypasses system access restrictions, potentially allowing unauthorized actions within the browser context. The vulnerability is categorized under CWE-862 (Missing Authorization). There is no CVSS score or detailed vendor advisory currently available, and no known active exploitation has been reported.

The vulnerability allows a remote attacker to bypass system access restrictions in affected versions of Google Chrome, which could lead to unauthorized access or actions within the browser environment. The impact severity is assessed as medium by Chromium security, indicating a moderate risk but no confirmed active exploitation or critical system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when visiting untrusted websites and consider using additional security controls such as browser sandboxing or restricting browser permissions where possible.