This vulnerability (CVE-2026-87537) involves missing authorization checks within the Extensions component of Google Chrome versions before 153.0.8010.36. An attacker who has already compromised the renderer process could exploit this flaw by sending crafted network traffic to execute arbitrary code outside the browser sandbox. This elevates the attacker's capabilities beyond the renderer process sandbox restrictions. The vulnerability is linked to CWE-862 (Missing Authorization). No official patch or vendor advisory details are available in the provided data.

If exploited, this vulnerability could allow an attacker with control over the renderer process to execute arbitrary code outside the sandbox, potentially leading to greater system compromise. However, exploitation requires prior compromise of the renderer process. The severity is assessed as medium by Chromium security, indicating a moderate risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should follow best practices to minimize renderer process compromise, such as avoiding untrusted content and keeping the browser updated. Monitor official Google Chrome security advisories for updates regarding this vulnerability.