CVE-2026-87438

Published on September 9, 2026

Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Weakness type (CWE)CWE-787

Vulnerabilities

Chrome V8 Zero-Day Exploited in Active Attacks: Update to Version 153 Now

Google fixes actively exploited Chrome V8 zero-day CVE-2026-87491 plus 229 flaws. Update to Chrome 153.0.8010.36/37 and restart now.

Sep 9, 202611:586 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Chrome V8 Zero-Day Exploited in Active Attacks: Update to Version 153 Now