VULNERABILITY INTELLIGENCE

CVE-2026-87551

CVSS score4.3 MEDIUM

EPSS probability0.18%

CISA KEVNot currently listed

Published2026-09-09

Last modified2026-09-14

Description

Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)