CVE-2026-87628

Published on September 9, 2026

Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)

Weakness type (CWE)CWE-416

Vulnerabilities

Chrome V8 Zero-Day Exploited in Active Attacks: Update to Version 153 Now

Google fixes actively exploited Chrome V8 zero-day CVE-2026-87491 plus 229 flaws. Update to Chrome 153.0.8010.36/37 and restart now.

Sep 9, 202611:586 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Chrome V8 Zero-Day Exploited in Active Attacks: Update to Version 153 Now