Threats tagged 'ghsa-wr5p-rp9h-m83h'

CVE-2026-87487 is a missing authorization vulnerability in the FileSystem component of Google Chrome prior to version 153.0.8010.36. It allows a remote attacker who has compromised the renderer process and used social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.3.