What is the CVSS score of CVE-2026-87627?

CVE-2026-87627 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-87627?

Yes, a patch is available for CVE-2026-87627. Update the affected software to the latest version immediately.

Google CVE-2026-87627

EUVD-2026-74445 MEDIUM

Interpretation Conflict (CWE-436)

2026-09-09 Chrome

GHSA-687p-8fvf-qm32

Authentication Bypass Google

6.5

CVSS 3.1 · Vendor: Chrome

Severity by source

Vendor (Chrome) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Primary rating from Vendor (Chrome) · only source for this CVE.

CVSS VectorVendor: Chrome

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Sep 15, 2026 - 10:55 vuln.today

CVSS changed

Sep 14, 2026 - 13:22 NVD

6.5 (MEDIUM)

Patch available

Sep 09, 2026 - 01:03 EUVD

CVE Published

Sep 09, 2026 - 00:10 cve.org

MEDIUM 6.5

CVE Published

Sep 09, 2026 - 00:10 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted file. (Chromium security severity: Low)

AnalysisAI

An interpretation conflict (CWE-436) in Google Chrome's Safe Browsing handling on macOS allows a remote attacker to bypass system access restrictions by convincing a victim to open a crafted file, all the way up to and including Chrome 153.0.8010.36. Exploitation requires the victim to interact with the file (CVSS UI:R) and yields an integrity-only impact (C:N/I:H/A:N), which is consistent with Chromium's own 'Low' severity rating despite the 6.5 base score. …