CVE-2026-87486 | Vulnetix

CVE-2026-87486 PUBLISHED CVSS 4 MEDIUM

Reported by Chrome · Published September 9, 2026

Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. (Chromium security severity: Medium)

Risk Scores

CVSS 3.1

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected Products

Vendor	Product	Versions
Google	Chrome	153.0.8010.36
Google	Chrome	153.0.8010.36

Timeline

Sep 9, 2026 EPSS Score
Sep 9, 2026 Coalition ESS Score
Sep 9, 2026 CVE Published
Sep 9, 2026 CVE Updated
Sep 10, 2026 EPSS Score
Sep 11, 2026 EPSS Score

References

Open in Interactive Console →