What is GHSA-84hr-v5jv-xw58?

GHSA-84hr-v5jv-xw58 is a security advisory published by GitHub Security Advisories with Medium severity. Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153...

Which CVE IDs does GHSA-84hr-v5jv-xw58 cover?

GHSA-84hr-v5jv-xw58 covers the following CVE IDs: CVE-2026-87482. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-84hr-v5jv-xw58?

GHSA-84hr-v5jv-xw58 has a CVSS v3 base score of 5.9, published by GitHub Security Advisories.

GHSA-84hr-v5jv-xw58MediumCVSS 5.9

Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153...

Vendor

GitHub Security Advisories

Published

September 9, 2026

Last Modified

September 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-87482 →

📋 Description

Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. (Chromium security severity: Medium)

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-87482
https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html
https://issues.chromium.org/issues/503736006
https://github.com/advisories/GHSA-84hr-v5jv-xw58