This vulnerability is known to have been exploited in attacks. Update affected browsers immediately.
CVE details
CVE-2026-87491
Out of bounds write in V8 in Google Chrome prior to 153.
Description
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Affected products
- Google Chrome · → 153.0.8010.36
- Chromium · → 153.0.8010.36
Overlaps: Google Chrome, Chromium