CVE-2026-87491HighKEVZero-Day

CVE-2026-87491

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

TCL Priority

CVSS

8.8

EPSS

KEV

Yes

Exploitation

reported

Timeline

CVE Published
53d ago · NVD
Added to TCL Advisory
52d ago · TCL Advisory
Added to CISA KEV
52d ago · CISA
Exploitation Status Changed
52d ago · TCL Advisory
Vendor Advisory Published
50d ago · Vendor

What Changed?

Exploitationunknown→reportedcisa_kev

KEVNO→YEScisa_kev

Sources

NVD · Updated 52d ago

CISA KEV · Updated 53d ago

References

chrome-cve-admin@google.com chrome-cve-admin@google.com 134c704f-9b21-4f2e-91b3-4a467353bcc0