Threats tagged 'ghsa-g7pv-92gh-724g'

A vulnerability in the Paint component of Google Chrome prior to version 153.0.8010.36 allows a remote attacker to bypass authorization controls and obtain cross-origin data via a crafted HTML page. This issue is classified as an incorrect authorization flaw (CWE-863) and has been assigned CVE-2026-87651. The vulnerability is considered high severity by the Chromium security team. No CVSS score or detailed vendor advisory is currently available, and no known exploits are reported in the wild.