Microsoft Security Response Center guidance
Release Notes
Vendor-listed releases
- 153.0.4234.32
Vulnerability intelligence
CVE-2026-87552 and is rated Medium severity with a CVSS score of 5.5. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Release Notes
Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: High)