Vulnerability intelligence

CVE-2026-87464

Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVSS Score

—

Unrated

EPSS — Exploit Probability

0.6%

Riskier than 47% of all CVEs · checked 2026-10-23

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered Sep 9, 2026 · latest Sep 9, 2026

Coverage timeline

Chrome 153 Patches Exploited V8 Zero Day and 229 Flaws
securityonline.info · Sep 9, 2026

Related CVEs — Google

CVE-2026-111497 CVE-2026-113271 CVE-2026-113303 CVE-2026-0075 CVE-2026-110922 CVE-2026-110913 CVE-2026-110919 CVE-2026-110921