CVE-2026-87628

High8.3 Published on Sep 9, 2026

Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)

CVSS score8.3 / 10CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness type (CWE)CWE-416

Vendorsgoogle

Affected products

Vendors	Product	Versions
google	chrome	< 153.0.8010.36

Vulnerabilities

Chrome V8 Zero-Day Exploited in Active Attacks: Update to Version 153 Now

Google fixes actively exploited Chrome V8 zero-day CVE-2026-87491 plus 229 flaws. Update to Chrome 153.0.8010.36/37 and restart now.

Sep 9, 202611:58 6 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Chrome V8 Zero-Day Exploited in Active Attacks: Update to Version 153 Now