Exploit for CVE-2026-87491

cve · 2026-09-09

Description

Out-of-bounds write in V8 in Chrome prior to 153.0.8010.36 allows arbitrary code execution.

Affected Google Chrome versions

Google Chrome< 153.0.8010.36

CVSS 8.8 for CVE-2026-87491

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:REQUIRED

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

0.3%higher than 21.4% of all CVEs

Updated 2026-09-10

CVE Information

CVE-2026-87491

References

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html

https://issues.chromium.org/issues/543557673

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-87491

Exploit Details

Modified:2026-09-10 12:49

Last Seen:2026-09-10 13:51

Reporter:Chrome

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=CVE-2026-87491
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Exploit Code

Share

Share on social media: