Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML… (CVE-2026-87566)
Source GCVE Database
Not known to be exploited.
Data as of 10/25/2026, 04:40:14 UTC
CVSS not yet scored by NVD
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 19% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
What to do
AI-suggested
Users should monitor official Google Chrome security advisories for updates and apply any forthcoming patches promptly.
Description
A vulnerability in Google Chrome prior to version 153.0.8010.36 allows a remote attacker to leak sensitive information by exploiting an observable discrepancy in the browser's layout engine via a crafted HTML page. The issue is classified with medium severity by Chromium security. No known exploits are reported in the wild, and no patch information is currently available.
Impact
Successful exploitation could allow a remote attacker to obtain sensitive information from the victim's browser by exploiting layout discrepancies. The impact is limited to information disclosure without evidence of further compromise or code execution.
Weaknesses
- CWE-203Observable Discrepancy (opens in a new tab)
Base weakness
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.