HIGH
CVE-2026-87491
CVSS
8.8
KEV
Description
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Weakness (CWE)
CWE-787
Out-of-bounds Write
EPSS Score
1%
Probability of exploitation in next 30 days
61.2th percentile
References
https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html
Release Notes, Vendor Advisory
https://issues.chromium.org/issues/543557673
Permissions Required
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-87491
US Government Resource
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.