Detections
Analytics

CVE-2026-87628

high

Description

Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)

References

http://chromereleases.googleblog.com/2026/09/long-term-support-channel-update-for.html

https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html

https://issues.chromium.org/issues/553770012

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-74485

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html

Details

Source: Mitre, NVD

Published: 2026-09-09

Updated: 2026-09-10

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:A/AC:H/Au:N/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 8.3

Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00168