CVE-2026-87482 - Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic

Back Back to CVE browser

MEDIUM

Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic

Published Sep 9, 2026

5.9

MEDIUM

CVSS 3.1

EPSS 0.19%

Description

Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. (Chromium security severity: Medium)

Affected products

Vendor Google Product Chrome Default
n/a
- Version
  153.0.8010.36
  Status
  affected
  Constraints
  <153.0.8010.36

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Google

Chrome

n/a

Version	Status	Constraints
153.0.8010.36	affected	<153.0.8010.36

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-319

References (2)

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html
Release NotesVendor Advisory
https://issues.chromium.org/issues/503736006
ExploitIssue TrackingPatch

Link	Providers	Tags
https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html		Release NotesVendor Advisory
https://issues.chromium.org/issues/503736006		ExploitIssue TrackingPatch

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Chrome

Published Sep 9, 2026

Updated Sep 10, 2026

Reserved Sep 8, 2026

Link CVE-2026-87482

CISA Vulnrichment

Updated Sep 10, 2026

NVD

Status Analyzed

Modified Sep 10, 2026

Link CVE-2026-87482

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-87482