CVE-2026-87512: Use After Free
Published Sep 9, 2026
·Updated
Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
2 affected components
Google Chrome<153.0.8010.36
Google ANGLE
Event History
Sep 9, 2026
CVE Published
via MITRE·12:09 AM
Data Sourced
via MITRE·12:09 AM
DescriptionWeakness
Frequently Asked Questions
1
Which systems are affected?
The issue affects Google Chrome on Windows before version 153.0.8010.36. The vulnerable component is ANGLE.
2
What does an attacker need to exploit this issue?
A remote attacker needs to cause the target to process a crafted HTML page. Successful exploitation can result in arbitrary code execution outside the Chrome sandbox.