# Microsoft Edge 153.0.4234.32

Microsoft Edge 153.0.4234.32, released September 10, 2026, fixes 181 CVEs in Microsoft Edge. One of them is being exploited (CVE-2026-87491); 1 on CISA KEV. Patch Radar priority: Patch now. The latest Microsoft Edge is 157.0.4341.42, which also fixes every one of these CVEs.

- Web page: https://patchblox.com/security/fix/macos/com.microsoft.edgemac-153.0.4234.32
- Platform: macOS
- Released: Sep 10, 2026
- Priority: Patch now (Closes CVE-2026-87491, exploited (CISA KEV))
- CVEs: 181, exploited: 1, on CISA KEV: 1
- Superseded by: [Microsoft Edge 157.0.4341.42](https://patchblox.com/security/data/product/macos/microsoft-edge.md), the latest version, which also fixes every CVE listed here

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Microsoft Edge](https://patchblox.com/security/data/product/macos/microsoft-edge.md) |  | 153.0.4234.32 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-87491](https://patchblox.com/security/data/cve/CVE-2026-87491.md) | Patch now | Chromium CVE-2026-87491:  Out of bounds write in V8 | 8.8 | 0.0351 | CISA KEV |
| [CVE-2026-87464](https://patchblox.com/security/data/cve/CVE-2026-87464.md) | Urgent | Chromium CVE-2026-87464: Use after free in WebGL | 9.6 | 0.0058 |  |
| [CVE-2026-87646](https://patchblox.com/security/data/cve/CVE-2026-87646.md) | Urgent | Chromium CVE-2026-87646: Use after free in Web Authentication | 9.6 | 0.0053 |  |
| [CVE-2026-87527](https://patchblox.com/security/data/cve/CVE-2026-87527.md) | Urgent | Chromium CVE-2026-87527: Buffer overflow in WebGL | 9.6 | 0.0051 |  |
| [CVE-2026-87529](https://patchblox.com/security/data/cve/CVE-2026-87529.md) | Urgent | Chromium CVE-2026-87529: Numeric truncation error in Media | 9.6 | 0.0050 |  |
| [CVE-2026-87547](https://patchblox.com/security/data/cve/CVE-2026-87547.md) | Urgent | Chromium CVE-2026-87547: Incorrect reference resolution in FileSystem | 9.6 | 0.0050 |  |
| [CVE-2026-87613](https://patchblox.com/security/data/cve/CVE-2026-87613.md) | Urgent | Chromium CVE-2026-87613: Incorrect reference resolution in Extensions | 9.0 | 0.0047 |  |
| [CVE-2026-87448](https://patchblox.com/security/data/cve/CVE-2026-87448.md) | Urgent | Chromium CVE-2026-87448: Use after free in DevTools | 9.6 | 0.0046 |  |
| [CVE-2026-87455](https://patchblox.com/security/data/cve/CVE-2026-87455.md) | Urgent | Chromium CVE-2026-87455: Use after free in Aura | 9.6 | 0.0046 |  |
| [CVE-2026-87470](https://patchblox.com/security/data/cve/CVE-2026-87470.md) | Urgent | Chromium CVE-2026-87470: Improper quantity validation in Tint | 9.6 | 0.0046 |  |
| [CVE-2026-87474](https://patchblox.com/security/data/cve/CVE-2026-87474.md) | Urgent | Chromium CVE-2026-87474: Use after free in Payments | 9.6 | 0.0046 |  |
| [CVE-2026-87558](https://patchblox.com/security/data/cve/CVE-2026-87558.md) | Urgent | Chromium CVE-2026-87558: Use after free in Payments | 9.6 | 0.0046 |  |
| [CVE-2026-87581](https://patchblox.com/security/data/cve/CVE-2026-87581.md) | Urgent | Chromium CVE-2026-87581: Use after free in Payments | 9.6 | 0.0046 |  |
| [CVE-2026-87634](https://patchblox.com/security/data/cve/CVE-2026-87634.md) | Urgent | Chromium CVE-2026-87634: Use after free in WebPackaging | 9.6 | 0.0046 |  |
| [CVE-2026-87637](https://patchblox.com/security/data/cve/CVE-2026-87637.md) | Urgent | Chromium CVE-2026-87637: Use after free in Extensions | 9.6 | 0.0046 |  |
| [CVE-2026-87638](https://patchblox.com/security/data/cve/CVE-2026-87638.md) | Urgent | Chromium CVE-2026-87638: Out of bounds write in Media | 9.6 | 0.0046 |  |
| [CVE-2026-87650](https://patchblox.com/security/data/cve/CVE-2026-87650.md) | Urgent | Chromium CVE-2026-87650: Out of bounds read in WebGL | 9.6 | 0.0046 |  |
| [CVE-2026-87492](https://patchblox.com/security/data/cve/CVE-2026-87492.md) | Urgent | Chromium CVE-2026-87492: Incorrect authorization in DevTools | 9.6 | 0.0044 |  |
| [CVE-2026-87504](https://patchblox.com/security/data/cve/CVE-2026-87504.md) | Urgent | Chromium CVE-2026-87504: Use after free in Core | 9.6 | 0.0043 |  |
| [CVE-2026-87526](https://patchblox.com/security/data/cve/CVE-2026-87526.md) | Urgent | Chromium CVE-2026-87526: Use after free in Passwords | 9.6 | 0.0043 |  |
| [CVE-2026-87595](https://patchblox.com/security/data/cve/CVE-2026-87595.md) | Urgent | Chromium CVE-2026-87595: Server-side request forgery in Mobile | 9.8 | 0.0042 |  |
| [CVE-2026-87500](https://patchblox.com/security/data/cve/CVE-2026-87500.md) | Urgent | Chromium CVE-2026-87500: Improper validation of array index in ANGLE | 9.6 | 0.0036 |  |
| [CVE-2026-87544](https://patchblox.com/security/data/cve/CVE-2026-87544.md) | Urgent | Chromium CVE-2026-87544: Incorrect authorization in Extensions | 9.8 | 0.0034 |  |
| [CVE-2026-69486](https://patchblox.com/security/data/cve/CVE-2026-69486.md) | High | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 | 0.0082 |  |
| [CVE-2026-85893](https://patchblox.com/security/data/cve/CVE-2026-85893.md) | High | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 8.8 | 0.0082 |  |
| [CVE-2026-87430](https://patchblox.com/security/data/cve/CVE-2026-87430.md) | High | Chromium CVE-2026-87430: Buffer overflow in WebRTC | 8.8 | 0.0057 |  |
| [CVE-2026-87579](https://patchblox.com/security/data/cve/CVE-2026-87579.md) | High | Chromium CVE-2026-87579: Buffer overflow in WebRTC | 8.8 | 0.0057 |  |
| [CVE-2026-87636](https://patchblox.com/security/data/cve/CVE-2026-87636.md) | High | Chromium CVE-2026-87636: Type confusion in XML | 8.8 | 0.0045 |  |
| [CVE-2026-87510](https://patchblox.com/security/data/cve/CVE-2026-87510.md) | High | Chromium CVE-2026-87510: Improper input validation in FileAPI | 8.3 | 0.0043 |  |
| [CVE-2026-87553](https://patchblox.com/security/data/cve/CVE-2026-87553.md) | High | Chromium CVE-2026-87553: Improper input validation in SiteIsolation | 8.3 | 0.0043 |  |
| [CVE-2026-87572](https://patchblox.com/security/data/cve/CVE-2026-87572.md) | High | Chromium CVE-2026-87572: Injection in DevTools | 8.3 | 0.0042 |  |
| [CVE-2026-87440](https://patchblox.com/security/data/cve/CVE-2026-87440.md) | High | Chromium CVE-2026-87440: Out of bounds read in Media | 8.8 | 0.0041 |  |
| [CVE-2026-87444](https://patchblox.com/security/data/cve/CVE-2026-87444.md) | High | Chromium CVE-2026-87444: Memory corruption in Codecs | 8.8 | 0.0041 |  |
| [CVE-2026-87460](https://patchblox.com/security/data/cve/CVE-2026-87460.md) | High | Chromium CVE-2026-87460: Use after free in Platform | 8.8 | 0.0041 |  |
| [CVE-2026-87536](https://patchblox.com/security/data/cve/CVE-2026-87536.md) | High | Chromium CVE-2026-87536: Use after free in V8 | 8.8 | 0.0041 |  |
| [CVE-2026-87542](https://patchblox.com/security/data/cve/CVE-2026-87542.md) | High | Chromium CVE-2026-87542: Use after free in Input | 8.8 | 0.0041 |  |
| [CVE-2026-87588](https://patchblox.com/security/data/cve/CVE-2026-87588.md) | High | Chromium CVE-2026-87588: Use after free in Chromecast | 8.8 | 0.0041 |  |
| [CVE-2026-87617](https://patchblox.com/security/data/cve/CVE-2026-87617.md) | High | Chromium CVE-2026-87617: Use after free in DevTools | 8.8 | 0.0041 |  |
| [CVE-2026-87537](https://patchblox.com/security/data/cve/CVE-2026-87537.md) | High | Chromium CVE-2026-87537: Missing authorization in Extensions | 8.1 | 0.0041 |  |
| [CVE-2026-87479](https://patchblox.com/security/data/cve/CVE-2026-87479.md) | High | Chromium CVE-2026-87479: Insufficient policy enforcement in Extensions | 8.3 | 0.0040 |  |
| [CVE-2026-87480](https://patchblox.com/security/data/cve/CVE-2026-87480.md) | High | Chromium CVE-2026-87480: Use after free in Printing | 8.3 | 0.0040 |  |
| [CVE-2026-87506](https://patchblox.com/security/data/cve/CVE-2026-87506.md) | High | Chromium CVE-2026-87506: Privilege elevation in WebUI | 8.3 | 0.0040 |  |
| [CVE-2026-87639](https://patchblox.com/security/data/cve/CVE-2026-87639.md) | High | Chromium CVE-2026-87639: Use after free in WebPackaging | 8.3 | 0.0040 |  |
| [CVE-2026-87487](https://patchblox.com/security/data/cve/CVE-2026-87487.md) | High | Chromium CVE-2026-87487: Missing authorization in FileSystem | 8.3 | 0.0039 |  |
| [CVE-2026-87582](https://patchblox.com/security/data/cve/CVE-2026-87582.md) | High | Chromium CVE-2026-87582: Confused deputy in DataTransfer | 8.3 | 0.0039 |  |
| [CVE-2026-87489](https://patchblox.com/security/data/cve/CVE-2026-87489.md) | High | Chromium CVE-2026-87489: Memory corruption in V8 | 8.8 | 0.0038 |  |
| [CVE-2026-87569](https://patchblox.com/security/data/cve/CVE-2026-87569.md) | High | Chromium CVE-2026-87569: Missing authorization in Views | 8.8 | 0.0034 |  |
| [CVE-2026-87431](https://patchblox.com/security/data/cve/CVE-2026-87431.md) | High | Chromium CVE-2026-87431: Missing authorization in Extensions | 7.5 | 0.0032 |  |
| [CVE-2026-87450](https://patchblox.com/security/data/cve/CVE-2026-87450.md) | High | Chromium CVE-2026-87450: Incorrect authorization in Permissions | 7.5 | 0.0032 |  |
| [CVE-2026-87604](https://patchblox.com/security/data/cve/CVE-2026-87604.md) | High | Chromium CVE-2026-87604: Out of bounds read in ANGLE | 9.6 | 0.0032 |  |
| [CVE-2026-87471](https://patchblox.com/security/data/cve/CVE-2026-87471.md) | High | Chromium CVE-2026-87471: Incorrect authorization in ServiceWorker | 8.1 | 0.0032 |  |
| [CVE-2026-87499](https://patchblox.com/security/data/cve/CVE-2026-87499.md) | High | Chromium CVE-2026-87499: Incorrect authorization in Network | 8.1 | 0.0032 |  |
| [CVE-2026-87606](https://patchblox.com/security/data/cve/CVE-2026-87606.md) | High | Chromium CVE-2026-87606: Missing authorization in SiteIsolation | 8.1 | 0.0032 |  |
| [CVE-2026-87570](https://patchblox.com/security/data/cve/CVE-2026-87570.md) | High | Chromium CVE-2026-87570: Incorrect authorization in SiteIsolation | 8.8 | 0.0031 |  |
| [CVE-2026-87433](https://patchblox.com/security/data/cve/CVE-2026-87433.md) | High | Chromium CVE-2026-87433: Race condition in FileAPI | 8.8 | 0.0028 |  |
| [CVE-2026-87505](https://patchblox.com/security/data/cve/CVE-2026-87505.md) | High | Chromium CVE-2026-87505: Incorrect authorization in FileSystem | 8.1 | 0.0027 |  |
| [CVE-2026-87608](https://patchblox.com/security/data/cve/CVE-2026-87608.md) | High | Chromium CVE-2026-87608: Improper certificate validation in FedCM | 7.5 | 0.0026 |  |
| [CVE-2026-87586](https://patchblox.com/security/data/cve/CVE-2026-87586.md) | High | Chromium CVE-2026-87586: Out of bounds read in ANGLE | 9.6 | 0.0025 |  |
| [CVE-2026-87596](https://patchblox.com/security/data/cve/CVE-2026-87596.md) | High | Chromium CVE-2026-87596: Out of bounds read in ANGLE | 9.6 | 0.0025 |  |
| [CVE-2026-87578](https://patchblox.com/security/data/cve/CVE-2026-87578.md) | High | Chromium CVE-2026-87578: Use after free in Receiver | 8.3 | 0.0019 |  |
| [CVE-2026-87628](https://patchblox.com/security/data/cve/CVE-2026-87628.md) | High | Chromium CVE-2026-87628: Use after free in Cast | 8.3 | 0.0019 |  |
| [CVE-2026-87633](https://patchblox.com/security/data/cve/CVE-2026-87633.md) | High | Chromium CVE-2026-87633: Use after free in Views | 8.6 | 0.0015 |  |
| [CVE-2026-87533](https://patchblox.com/security/data/cve/CVE-2026-87533.md) | High | Chromium CVE-2026-87533: Use after free in DevTools | 8.1 | 0.0014 |  |
| [CVE-2026-87514](https://patchblox.com/security/data/cve/CVE-2026-87514.md) | High | Chromium CVE-2026-87514: Use after free in Views | 8.1 | 0.0013 |  |
| [CVE-2026-87549](https://patchblox.com/security/data/cve/CVE-2026-87549.md) | Routine | Chromium CVE-2026-87549: Incomplete cleanup in Downloads | 6.5 | 0.0037 |  |
| [CVE-2026-87535](https://patchblox.com/security/data/cve/CVE-2026-87535.md) | Routine | Chromium CVE-2026-87535: Information loss or omission in Safebrowsing | 6.5 | 0.0034 |  |
| [CVE-2026-87541](https://patchblox.com/security/data/cve/CVE-2026-87541.md) | Routine | Chromium CVE-2026-87541: Information leak in Navigation | 6.5 | 0.0032 |  |
| [CVE-2026-87437](https://patchblox.com/security/data/cve/CVE-2026-87437.md) | Routine | Chromium CVE-2026-87437: Information leak in Frames | 6.5 | 0.0032 |  |
| [CVE-2026-87459](https://patchblox.com/security/data/cve/CVE-2026-87459.md) | Routine | Chromium CVE-2026-87459: Observable discrepancy in Select | 6.5 | 0.0032 |  |
| [CVE-2026-87477](https://patchblox.com/security/data/cve/CVE-2026-87477.md) | Routine | Chromium CVE-2026-87477: Information leak in Core | 6.5 | 0.0032 |  |
| [CVE-2026-87478](https://patchblox.com/security/data/cve/CVE-2026-87478.md) | Routine | Chromium CVE-2026-87478: Observable discrepancy in Autofill | 6.5 | 0.0032 |  |
| [CVE-2026-87490](https://patchblox.com/security/data/cve/CVE-2026-87490.md) | Routine | Chromium CVE-2026-87490: Information leak in Transactions Platform | 6.5 | 0.0032 |  |
| [CVE-2026-87593](https://patchblox.com/security/data/cve/CVE-2026-87593.md) | Routine | Chromium CVE-2026-87593: Information leak in Editing | 6.5 | 0.0032 |  |
| [CVE-2026-87620](https://patchblox.com/security/data/cve/CVE-2026-87620.md) | Routine | Chromium CVE-2026-87620: Observable discrepancy in SVG | 6.5 | 0.0032 |  |
| [CVE-2026-87623](https://patchblox.com/security/data/cve/CVE-2026-87623.md) | Routine | Chromium CVE-2026-87623: Observable discrepancy in DOM | 6.5 | 0.0032 |  |
| [CVE-2026-87590](https://patchblox.com/security/data/cve/CVE-2026-87590.md) | Routine | Chromium CVE-2026-87590: Improper input validation in Passwords | 5.9 | 0.0032 |  |
| [CVE-2026-87436](https://patchblox.com/security/data/cve/CVE-2026-87436.md) | Routine | Chromium CVE-2026-87436: Incomplete cleanup in Browser | 6.5 | 0.0031 |  |
| [CVE-2026-87446](https://patchblox.com/security/data/cve/CVE-2026-87446.md) | Routine | Chromium CVE-2026-87446: Incomplete cleanup in Extensions | 6.5 | 0.0031 |  |
| [CVE-2026-87443](https://patchblox.com/security/data/cve/CVE-2026-87443.md) | Routine | Chromium CVE-2026-87443: Missing authorization in Actor | 6.5 | 0.0031 |  |
| [CVE-2026-87476](https://patchblox.com/security/data/cve/CVE-2026-87476.md) | Routine | Chromium CVE-2026-87476: Incorrect authorization in Loader | 6.5 | 0.0031 |  |
| [CVE-2026-87631](https://patchblox.com/security/data/cve/CVE-2026-87631.md) | Routine | Chromium CVE-2026-87631: Missing authorization in DOM | 6.5 | 0.0031 |  |
| [CVE-2026-87429](https://patchblox.com/security/data/cve/CVE-2026-87429.md) | Routine | Chromium CVE-2026-87429: Missing authorization in ServiceWorker | 6.5 | 0.0029 |  |
| [CVE-2026-87473](https://patchblox.com/security/data/cve/CVE-2026-87473.md) | Routine | Chromium CVE-2026-87473: Incorrect authorization in FileHandling | 6.5 | 0.0029 |  |
| [CVE-2026-87519](https://patchblox.com/security/data/cve/CVE-2026-87519.md) | Routine | Chromium CVE-2026-87519: Incorrect authorization in Safebrowsing | 6.5 | 0.0029 |  |
| [CVE-2026-87603](https://patchblox.com/security/data/cve/CVE-2026-87603.md) | Routine | Chromium CVE-2026-87603: Missing authorization in FileSystem | 6.5 | 0.0029 |  |
| [CVE-2026-87610](https://patchblox.com/security/data/cve/CVE-2026-87610.md) | Routine | Chromium CVE-2026-87610: Incorrect authorization in Omnibox | 6.5 | 0.0029 |  |
| [CVE-2026-87629](https://patchblox.com/security/data/cve/CVE-2026-87629.md) | Routine | Chromium CVE-2026-87629: Incorrect authorization in Sources | 6.5 | 0.0029 |  |
| [CVE-2026-87435](https://patchblox.com/security/data/cve/CVE-2026-87435.md) | Routine | Chromium CVE-2026-87435: Information leak in ControlledFrame | 5.3 | 0.0028 |  |
| [CVE-2026-87439](https://patchblox.com/security/data/cve/CVE-2026-87439.md) | Routine | Chromium CVE-2026-87439: Information leak in ServiceWorker | 5.3 | 0.0028 |  |
| [CVE-2026-87566](https://patchblox.com/security/data/cve/CVE-2026-87566.md) | Routine | Chromium CVE-2026-87566: Observable discrepancy in Layout | 5.3 | 0.0028 |  |
| [CVE-2026-87580](https://patchblox.com/security/data/cve/CVE-2026-87580.md) | Routine | Chromium CVE-2026-87580: Incorrect authorization in WebAppInstalls | 6.5 | 0.0028 |  |
| [CVE-2026-87584](https://patchblox.com/security/data/cve/CVE-2026-87584.md) | Routine | Chromium CVE-2026-87584: Incorrect authorization in WebUI | 6.5 | 0.0028 |  |
| [CVE-2026-87642](https://patchblox.com/security/data/cve/CVE-2026-87642.md) | Routine | Chromium CVE-2026-87642: Uninitialized resource in WebGL | 4.3 | 0.0028 |  |
| [CVE-2026-87626](https://patchblox.com/security/data/cve/CVE-2026-87626.md) | Routine | Chromium CVE-2026-87626: Incorrect authorization in DeviceBoundSessionCredentials | 6.5 | 0.0028 |  |
| [CVE-2026-87532](https://patchblox.com/security/data/cve/CVE-2026-87532.md) | Routine | Chromium CVE-2026-87532: Improper state validation in Safebrowsing | 6.5 | 0.0028 |  |
| [CVE-2026-87627](https://patchblox.com/security/data/cve/CVE-2026-87627.md) | Routine | Chromium CVE-2026-87627: Interpretation conflict in Safebrowsing | 6.5 | 0.0027 |  |
| [CVE-2026-87453](https://patchblox.com/security/data/cve/CVE-2026-87453.md) | Routine | Chromium CVE-2026-87453: Confused deputy in BackgroundFetch | 5.3 | 0.0027 |  |
| [CVE-2026-87594](https://patchblox.com/security/data/cve/CVE-2026-87594.md) | Routine | Chromium CVE-2026-87594: Incorrect authorization in DataTransfer | 5.3 | 0.0027 |  |
| [CVE-2026-87605](https://patchblox.com/security/data/cve/CVE-2026-87605.md) | Routine | Chromium CVE-2026-87605: Missing authorization in Contacts | 5.3 | 0.0027 |  |
| [CVE-2026-87466](https://patchblox.com/security/data/cve/CVE-2026-87466.md) | Routine | Chromium CVE-2026-87466: Incorrect authorization in Workers | 4.3 | 0.0027 |  |
| [CVE-2026-87508](https://patchblox.com/security/data/cve/CVE-2026-87508.md) | Routine | Chromium CVE-2026-87508: Incorrect authorization in Loader | 4.3 | 0.0027 |  |
| [CVE-2026-87598](https://patchblox.com/security/data/cve/CVE-2026-87598.md) | Routine | Chromium CVE-2026-87598: Incorrect authorization in ServiceWorker | 4.3 | 0.0027 |  |
| [CVE-2026-87622](https://patchblox.com/security/data/cve/CVE-2026-87622.md) | Routine | Chromium CVE-2026-87622: Missing authorization in FedCM | 4.3 | 0.0027 |  |
| [CVE-2026-87468](https://patchblox.com/security/data/cve/CVE-2026-87468.md) | Routine | Chromium CVE-2026-87468: Incorrect authorization in Isolated | 6.5 | 0.0027 |  |
| [CVE-2026-87475](https://patchblox.com/security/data/cve/CVE-2026-87475.md) | Routine | Chromium CVE-2026-87475: Missing authorization in Omnibox | 6.5 | 0.0027 |  |
| [CVE-2026-87493](https://patchblox.com/security/data/cve/CVE-2026-87493.md) | Routine | Chromium CVE-2026-87493: Missing authorization in FileSystem | 6.5 | 0.0027 |  |
| [CVE-2026-87513](https://patchblox.com/security/data/cve/CVE-2026-87513.md) | Routine | Chromium CVE-2026-87513: Missing authorization in ControlledFrame | 6.5 | 0.0027 |  |
| [CVE-2026-87515](https://patchblox.com/security/data/cve/CVE-2026-87515.md) | Routine | Chromium CVE-2026-87515: Incorrect authorization in FileAPI | 6.5 | 0.0027 |  |
| [CVE-2026-87589](https://patchblox.com/security/data/cve/CVE-2026-87589.md) | Routine | Chromium CVE-2026-87589: Incorrect authorization in SiteIsolation | 6.5 | 0.0027 |  |
| [CVE-2026-87550](https://patchblox.com/security/data/cve/CVE-2026-87550.md) | Routine | Chromium CVE-2026-87550: Improper encoding or escaping of output in CSS | 4.3 | 0.0027 |  |
| [CVE-2026-87573](https://patchblox.com/security/data/cve/CVE-2026-87573.md) | Routine | Chromium CVE-2026-87573: Improper input validation in Network | 4.3 | 0.0027 |  |
| [CVE-2026-87632](https://patchblox.com/security/data/cve/CVE-2026-87632.md) | Routine | Chromium CVE-2026-87632: Cross-site scripting in SanitizerAPI | 4.3 | 0.0027 |  |
| [CVE-2026-87591](https://patchblox.com/security/data/cve/CVE-2026-87591.md) | Routine | Chromium CVE-2026-87591: Incorrect authorization in Extensions | 6.5 | 0.0026 |  |
| [CVE-2026-87561](https://patchblox.com/security/data/cve/CVE-2026-87561.md) | Routine | Chromium CVE-2026-87561: Incorrect authorization in Web Authentication | 4.3 | 0.0026 |  |
| [CVE-2026-87497](https://patchblox.com/security/data/cve/CVE-2026-87497.md) | Routine | Chromium CVE-2026-87497: Uninitialized resource in Codecs | 4.3 | 0.0026 |  |
| [CVE-2026-87546](https://patchblox.com/security/data/cve/CVE-2026-87546.md) | Routine | Chromium CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing | 4.3 | 0.0026 |  |
| [CVE-2026-87447](https://patchblox.com/security/data/cve/CVE-2026-87447.md) | Routine | Chromium CVE-2026-87447: Incorrect authorization in Network | 6.5 | 0.0026 |  |
| [CVE-2026-87495](https://patchblox.com/security/data/cve/CVE-2026-87495.md) | Routine | Chromium CVE-2026-87495: Information leak in Scroll | 4.3 | 0.0026 |  |
| [CVE-2026-87516](https://patchblox.com/security/data/cve/CVE-2026-87516.md) | Routine | Chromium CVE-2026-87516: Observable discrepancy in Navigation | 4.3 | 0.0026 |  |
| [CVE-2026-87574](https://patchblox.com/security/data/cve/CVE-2026-87574.md) | Routine | Chromium CVE-2026-87574: Information leak in ServiceWorker | 4.3 | 0.0026 |  |
| [CVE-2026-87592](https://patchblox.com/security/data/cve/CVE-2026-87592.md) | Routine | Chromium CVE-2026-87592: Out of bounds read in Tint | 4.3 | 0.0026 |  |
| [CVE-2026-87619](https://patchblox.com/security/data/cve/CVE-2026-87619.md) | Routine | Chromium CVE-2026-87619: Observable discrepancy in Prefetch | 4.3 | 0.0026 |  |
| [CVE-2026-87630](https://patchblox.com/security/data/cve/CVE-2026-87630.md) | Routine | Chromium CVE-2026-87630: Integer overflow in WebRTC | 4.3 | 0.0026 |  |
| [CVE-2026-87556](https://patchblox.com/security/data/cve/CVE-2026-87556.md) | Routine | Chromium CVE-2026-87556: Missing authorization in Browser | 4.3 | 0.0026 |  |
| [CVE-2026-87560](https://patchblox.com/security/data/cve/CVE-2026-87560.md) | Routine | Chromium CVE-2026-87560: Missing authorization in Browser | 4.3 | 0.0026 |  |
| [CVE-2026-87458](https://patchblox.com/security/data/cve/CVE-2026-87458.md) | Routine | Chromium CVE-2026-87458: UI misrepresentation in Geometry | 5.4 | 0.0026 |  |
| [CVE-2026-87462](https://patchblox.com/security/data/cve/CVE-2026-87462.md) | Routine | Chromium CVE-2026-87462: UI misrepresentation in FedCM | 5.4 | 0.0026 |  |
| [CVE-2026-87507](https://patchblox.com/security/data/cve/CVE-2026-87507.md) | Routine | Chromium CVE-2026-87507: UI misrepresentation in Downloads | 5.4 | 0.0026 |  |
| [CVE-2026-87635](https://patchblox.com/security/data/cve/CVE-2026-87635.md) | Routine | Chromium CVE-2026-87635: UI misrepresentation in Payments | 5.4 | 0.0026 |  |
| [CVE-2026-87577](https://patchblox.com/security/data/cve/CVE-2026-87577.md) | Routine | Chromium CVE-2026-87577: Incorrect authorization in Isolated | 4.3 | 0.0025 |  |
| [CVE-2026-87548](https://patchblox.com/security/data/cve/CVE-2026-87548.md) | Routine | Chromium CVE-2026-87548: Improper state validation in Installer | 4.3 | 0.0025 |  |
| [CVE-2026-87456](https://patchblox.com/security/data/cve/CVE-2026-87456.md) | Routine | Chromium CVE-2026-87456: Uninitialized resource in Media | 3.4 | 0.0025 |  |
| [CVE-2026-87647](https://patchblox.com/security/data/cve/CVE-2026-87647.md) | Routine | Chromium CVE-2026-87647: Uninitialized resource in GPU | 3.4 | 0.0025 |  |
| [CVE-2026-87651](https://patchblox.com/security/data/cve/CVE-2026-87651.md) | Routine | Chromium CVE-2026-87651: Incorrect authorization in Paint | 4.3 | 0.0025 |  |
| [CVE-2026-87441](https://patchblox.com/security/data/cve/CVE-2026-87441.md) | Routine | Chromium CVE-2026-87441: Missing authorization in Downloads | 6.5 | 0.0025 |  |
| [CVE-2026-87655](https://patchblox.com/security/data/cve/CVE-2026-87655.md) | Routine | Chromium CVE-2026-87655: Clickjacking in Downloads | 5.4 | 0.0025 |  |
| [CVE-2026-87434](https://patchblox.com/security/data/cve/CVE-2026-87434.md) | Routine | Chromium CVE-2026-87434: Missing authorization in CORS | 3.1 | 0.0024 |  |
| [CVE-2026-87442](https://patchblox.com/security/data/cve/CVE-2026-87442.md) | Routine | Chromium CVE-2026-87442: Confused deputy in Prerender | 3.1 | 0.0024 |  |
| [CVE-2026-87485](https://patchblox.com/security/data/cve/CVE-2026-87485.md) | Routine | Chromium CVE-2026-87485: Incorrect authorization in CORS | 3.1 | 0.0024 |  |
| [CVE-2026-87498](https://patchblox.com/security/data/cve/CVE-2026-87498.md) | Routine | Chromium CVE-2026-87498: Missing authorization in WebUI | 3.1 | 0.0024 |  |
| [CVE-2026-87614](https://patchblox.com/security/data/cve/CVE-2026-87614.md) | Routine | Chromium CVE-2026-87614: Incorrect authorization in ServiceWorker | 3.1 | 0.0024 |  |
| [CVE-2026-87652](https://patchblox.com/security/data/cve/CVE-2026-87652.md) | Routine | Chromium CVE-2026-87652: Incorrect authorization in PushAPI | 3.1 | 0.0024 |  |
| [CVE-2026-87543](https://patchblox.com/security/data/cve/CVE-2026-87543.md) | Routine | Chromium CVE-2026-87543: Missing authorization in Core | 4.3 | 0.0024 |  |
| [CVE-2026-87557](https://patchblox.com/security/data/cve/CVE-2026-87557.md) | Routine | Chromium CVE-2026-87557: Missing authorization in LocalNetworkAccess | 4.3 | 0.0024 |  |
| [CVE-2026-87461](https://patchblox.com/security/data/cve/CVE-2026-87461.md) | Routine | Chromium CVE-2026-87461: Information leak in Core | 4.3 | 0.0024 |  |
| [CVE-2026-87658](https://patchblox.com/security/data/cve/CVE-2026-87658.md) | Routine | Chromium CVE-2026-87658: Information leak in Extensions | 4.3 | 0.0024 |  |
| [CVE-2026-87472](https://patchblox.com/security/data/cve/CVE-2026-87472.md) | Routine | Chromium CVE-2026-87472: Improper input validation in FedCM | 4.2 | 0.0024 |  |
| [CVE-2026-87445](https://patchblox.com/security/data/cve/CVE-2026-87445.md) | Routine | Chromium CVE-2026-87445: UI misrepresentation in Session | 5.4 | 0.0024 |  |
| [CVE-2026-87484](https://patchblox.com/security/data/cve/CVE-2026-87484.md) | Routine | Chromium CVE-2026-87484: UI misrepresentation in Geometry | 5.4 | 0.0024 |  |
| [CVE-2026-87496](https://patchblox.com/security/data/cve/CVE-2026-87496.md) | Routine | Chromium CVE-2026-87496: UI misrepresentation in Browser | 5.4 | 0.0024 |  |
| [CVE-2026-87501](https://patchblox.com/security/data/cve/CVE-2026-87501.md) | Routine | Chromium CVE-2026-87501: UI misrepresentation in Passwords | 5.4 | 0.0024 |  |
| [CVE-2026-87599](https://patchblox.com/security/data/cve/CVE-2026-87599.md) | Routine | Chromium CVE-2026-87599: Improper input validation in Interstitials | 5.4 | 0.0024 |  |
| [CVE-2026-87523](https://patchblox.com/security/data/cve/CVE-2026-87523.md) | Routine | Chromium CVE-2026-87523: Race condition in DataTransfer | 5.3 | 0.0024 |  |
| [CVE-2026-87562](https://patchblox.com/security/data/cve/CVE-2026-87562.md) | Routine | Chromium CVE-2026-87562: Incorrect reference resolution in Accessibility | 4.3 | 0.0024 |  |
| [CVE-2026-87469](https://patchblox.com/security/data/cve/CVE-2026-87469.md) | Routine | Chromium CVE-2026-87469: Improper input validation in Extensions | 4.3 | 0.0023 |  |
| [CVE-2026-87511](https://patchblox.com/security/data/cve/CVE-2026-87511.md) | Routine | Chromium CVE-2026-87511: Missing authorization in DevTools | 4.3 | 0.0023 |  |
| [CVE-2026-87451](https://patchblox.com/security/data/cve/CVE-2026-87451.md) | Routine | Chromium CVE-2026-87451: Information leak in Downloads | 3.1 | 0.0023 |  |
| [CVE-2026-87521](https://patchblox.com/security/data/cve/CVE-2026-87521.md) | Routine | Chromium CVE-2026-87521: Information leak in WebMCP | 3.1 | 0.0023 |  |
| [CVE-2026-87531](https://patchblox.com/security/data/cve/CVE-2026-87531.md) | Routine | Chromium CVE-2026-87531: Information leak in CORS | 3.1 | 0.0023 |  |
| [CVE-2026-87657](https://patchblox.com/security/data/cve/CVE-2026-87657.md) | Routine | Chromium CVE-2026-87657: Use after free in V8 | 3.1 | 0.0023 |  |
| [CVE-2026-87539](https://patchblox.com/security/data/cve/CVE-2026-87539.md) | Routine | Chromium CVE-2026-87539: Observable discrepancy in Network | 3.1 | 0.0023 |  |
| [CVE-2026-87540](https://patchblox.com/security/data/cve/CVE-2026-87540.md) | Routine | Chromium CVE-2026-87540: Incorrect authorization in Isolated | 5.4 | 0.0023 |  |
| [CVE-2026-87645](https://patchblox.com/security/data/cve/CVE-2026-87645.md) | Routine | Chromium CVE-2026-87645: Improper state validation in Safebrowsing | 5.4 | 0.0023 |  |
| [CVE-2026-87649](https://patchblox.com/security/data/cve/CVE-2026-87649.md) | Routine | Chromium CVE-2026-87649: UI misrepresentation in Downloads | 5.4 | 0.0023 |  |
| [CVE-2026-87656](https://patchblox.com/security/data/cve/CVE-2026-87656.md) | Routine | Chromium CVE-2026-87656: Improper state validation in Safebrowsing | 5.4 | 0.0023 |  |
| [CVE-2026-87559](https://patchblox.com/security/data/cve/CVE-2026-87559.md) | Routine | Chromium CVE-2026-87559: UI misrepresentation in UI | 4.2 | 0.0022 |  |
| [CVE-2026-87452](https://patchblox.com/security/data/cve/CVE-2026-87452.md) | Routine | Chromium CVE-2026-87452: Incorrect authorization in GPU | 3.1 | 0.0022 |  |
| [CVE-2026-87611](https://patchblox.com/security/data/cve/CVE-2026-87611.md) | Routine | Chromium CVE-2026-87611: Missing authorization in FileSystem | 3.1 | 0.0022 |  |
| [CVE-2026-87449](https://patchblox.com/security/data/cve/CVE-2026-87449.md) | Routine | Chromium CVE-2026-87449: Cross-site request forgery in DeviceBoundSessionCredentials | 4.3 | 0.0022 |  |
| [CVE-2026-87575](https://patchblox.com/security/data/cve/CVE-2026-87575.md) | Routine | Chromium CVE-2026-87575: Incorrect authorization in Loader | 5.4 | 0.0022 |  |
| [CVE-2026-87432](https://patchblox.com/security/data/cve/CVE-2026-87432.md) | Routine | Chromium CVE-2026-87432: Incorrect authorization in Navigation | 4.2 | 0.0022 |  |
| [CVE-2026-87465](https://patchblox.com/security/data/cve/CVE-2026-87465.md) | Routine | Chromium CVE-2026-87465: Incorrect authorization in Downloads | 4.2 | 0.0022 |  |
| [CVE-2026-87502](https://patchblox.com/security/data/cve/CVE-2026-87502.md) | Routine | Chromium CVE-2026-87502: Confused deputy in Fullscreen | 4.2 | 0.0022 |  |
| [CVE-2026-87538](https://patchblox.com/security/data/cve/CVE-2026-87538.md) | Routine | Chromium CVE-2026-87538: Clickjacking in Input | 4.2 | 0.0022 |  |
| [CVE-2026-87563](https://patchblox.com/security/data/cve/CVE-2026-87563.md) | Routine | Chromium CVE-2026-87563: Origin validation error in Paint | 4.3 | 0.0021 |  |
| [CVE-2026-87567](https://patchblox.com/security/data/cve/CVE-2026-87567.md) | Routine | Chromium CVE-2026-87567: UI misrepresentation in UrlFormatting | 4.3 | 0.0020 |  |
| [CVE-2026-87568](https://patchblox.com/security/data/cve/CVE-2026-87568.md) | Routine | Chromium CVE-2026-87568: Improper input validation in Chromium | 4.3 | 0.0020 |  |
| [CVE-2026-87615](https://patchblox.com/security/data/cve/CVE-2026-87615.md) | Routine | Chromium CVE-2026-87615: Race condition in Payments | 5.4 | 0.0019 |  |
| [CVE-2026-87641](https://patchblox.com/security/data/cve/CVE-2026-87641.md) | Routine | Chromium CVE-2026-87641: Race condition in Browser | 4.2 | 0.0018 |  |
| [CVE-2026-87551](https://patchblox.com/security/data/cve/CVE-2026-87551.md) | Routine | Chromium CVE-2026-87551: Improper certificate validation in CORS | 4.3 | 0.0018 |  |
| [CVE-2026-87571](https://patchblox.com/security/data/cve/CVE-2026-87571.md) | Routine | Chromium CVE-2026-87571: Improper certificate validation in Loader | 5.4 | 0.0016 |  |

---

Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
