Chromium CVE-2026-87544: Incorrect authorization in Extensions

Api.Msrc.Microsoft • September 15, 2026

We use optional cookies to improve your experience on our websites, such as through social media connections, and to display personalized advertising based on your online activity. If you reject optional cookies, only cookies necessary to provide you the services will be used. You may change your selection by clicking “Manage Cookies” at the bottom of the page. Privacy Statement Third-Party Cookies

Released: Sep 15, 2026

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Why is this Chrome CVE included in the Security Update Guide?

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

How can I see the version of the browser?

In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window

Click on Help and Feedback

Click on Microsoft Edge

What is the version information for this release?

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle .

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Microsoft Edge Chromium-based Browser Announced A series of vulnerabilities affecting Microsoft Edge (Chromium-based) have been disclosed, including CVE-2026-77490, a spoofing vulnerability, and several 'use after free' vulnerabilities (CVE-2026-87460, CVE-2026-87578, CVE-2026-87609, CVE-2026-87542, CVE-2026-87502, CVE-2026-87514, CVE-2026-87512, CVE-2026-87628, CVE-2026-87533, CVE-2026-87526, CVE-2026-87556, CVE-2026-87449, CVE-2026-87507, CVE-2026-87540, CVE-2026-87441, CVE-2026-87457, CVE-2026-87468, CVE-2026-87549, CVE-2026-87560, CVE-2026-87593, CVE-2026-87548, CVE-2026-87569, CVE-2026-87451, CVE-2026-87495). These vulnerabilities could lead to unauthorized access and information leakage. The vulnerabilities were published between September 9 and September 15, 2026, with some requiring user interaction for exploitation. Microsoft has released updates to mitigate these vulnerabilities, and users are urged to update their browsers immediately. 190 sources 61

Extracted Entities

Chromium CVE-2026-87544: Incorrect authorization in Extensions

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Platforms (2)

Tools (1)