CVE-2026-87491: Google Chrome
This is a record in the CVE List, the public register of security flaws. CISA added it to its list of flaws known to be used by attackers on 9 Sept 2026. The title and any summary are in the source's own words.
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- Kind
- Digest
- Started
- Why we can name the supplier
- An official register says it: a CVE record, CISA's list of exploited flaws or the NCSC
Products it names
- Google Chrome (Google)
The latest
We aim to update this thread. For the latest, check the supplier's own page directly: www.cve.org/CVERecord?id=CVE-2026-87491.
This entry comes from our research build of public sources made on 24 Oct 2026.