Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome… (CVE-2026-87511)
A missing authorization vulnerability in DevTools of Google Chrome versions prior to 153.0.8010.36 allows a remote attacker to obtain cross-origin data via a crafted Chrome extension. The issue is classified with low severity by Chromium security. No CVSS score or known exploits in the wild are reported. No patch links are provided in the data, and the vendor advisory status is not confirmed.
AI Analysis
Technical Summary
CVE-2026-87511 describes a missing authorization check in the DevTools component of Google Chrome before version 153.0.8010.36. This flaw enables a remote attacker to leverage a specially crafted Chrome extension to access cross-origin data that should otherwise be restricted. The vulnerability is related to CWE-862 (Missing Authorization). The Chromium security team has rated this vulnerability as low severity. No detailed exploit information or vendor patch advisory is provided in the input data.
Potential Impact
The vulnerability allows unauthorized access to cross-origin data through DevTools when exploited by a crafted Chrome extension. This could lead to information disclosure across origins within the browser context. However, the impact is considered low severity by the Chromium security team, and no known active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the update to version 153.0.8010.36 or later once available to remediate this issue.
Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome… (CVE-2026-87511)
Description
A missing authorization vulnerability in DevTools of Google Chrome versions prior to 153.0.8010.36 allows a remote attacker to obtain cross-origin data via a crafted Chrome extension. The issue is classified with low severity by Chromium security. No CVSS score or known exploits in the wild are reported. No patch links are provided in the data, and the vendor advisory status is not confirmed.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-87511 describes a missing authorization check in the DevTools component of Google Chrome before version 153.0.8010.36. This flaw enables a remote attacker to leverage a specially crafted Chrome extension to access cross-origin data that should otherwise be restricted. The vulnerability is related to CWE-862 (Missing Authorization). The Chromium security team has rated this vulnerability as low severity. No detailed exploit information or vendor patch advisory is provided in the input data.
Potential Impact
The vulnerability allows unauthorized access to cross-origin data through DevTools when exploited by a crafted Chrome extension. This could lead to information disclosure across origins within the browser context. However, the impact is considered low severity by the Chromium security team, and no known active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the update to version 153.0.8010.36 or later once available to remediate this issue.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-62q5-jp6j-47gr
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-87511"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6aa15f95acd9273b49618dff
Added to database: 09/09/2026, 13:31:01 UTC
Last enriched: 09/09/2026, 14:16:28 UTC
Last updated: 09/09/2026, 23:51:59 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.