[CVE-2026-87530] Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0…

Descripción técnica

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)

Puntuación CVSS

Score: 8.1/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Productos afectados

Chrome, Windows — Google, Microsoft

Debilidades (CWE)

CWE-427

Fuente oficial

Publicado en NIST NVD.