CVE-2026-87491
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- Affected products
- Google Chrome
- Google Chrome
- < 153.0.8010.36
- CVSS 3.1
- 8.8 HIGH
- EPSS
- 0.3% (21th percentile)
- Weakness
- CWE-787
- NVD status
- Analyzed
- Published
- 2026-09-09
CVE-2026-87491 at NVD
2 known exploits for CVE-2026-87491
Proof-of-concept code and exploit modules indexed by Sploitus