Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML… (CVE-2026-87619)
Source GCVE Database
Not known to be exploited.
Data as of 10/25/2026, 04:40:14 UTC
CVSS not yet scored by NVD
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 16% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
What to do
Description
An observable discrepancy in the Prefetch feature of Google Chrome versions prior to 153.0.8010.36 could allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is classified with low severity by Chromium security. No exploit in the wild has been reported, and no patch information is provided in the available data.
Impact
The vulnerability could lead to cross-origin data leakage, potentially exposing sensitive information from other web origins to a remote attacker. The Chromium security team rates this issue as low severity, indicating limited impact or difficulty in exploitation. There are no known exploits in the wild.
Weaknesses
- CWE-203Observable Discrepancy (opens in a new tab)
Base weakness
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.