Vulnerability intelligence

CVE-2026-87628

Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)

CVSS Score

—

Unrated

EPSS — Exploit Probability

0.2%

Riskier than 8% of all CVEs · checked 2026-10-22

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered Sep 9, 2026 · latest Sep 9, 2026

Coverage timeline

Chrome 153 Patches Exploited V8 Zero Day and 229 Flaws
securityonline.info · Sep 9, 2026

Related CVEs — Google

CVE-2026-111497 CVE-2026-113271 CVE-2026-113303 CVE-2026-0075 CVE-2026-110922 CVE-2026-110913 CVE-2026-110919 CVE-2026-110921