CVE-2026-87652 Incorrect authorization in PushAPI in Google Chrome… — CVE Notify — TG.ME

🚨 CVE-2026-87652
Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

🎖@cveNotify
Chrome Releases
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 153 to the stable channel for Windows, Mac and Linux. This will roll out ov...
September 9, 2026 13