CVE-2026-87514: Use After Free

Q: Who is realistically exposed to this vulnerability?

Systems running Google Chrome before 153.0.8010.36 are exposed if a local attacker can run a program on the affected machine. The issue is described as enabling code execution outside Chrome’s sandbox.

Q: What does an attacker need to exploit it?

The attacker needs local access sufficient to execute a local program on the target system. The provided information does not indicate that remote or web-only exploitation is possible.

Q: How can I determine whether a system is affected?

Check the installed Google Chrome version. Versions earlier than 153.0.8010.36 are affected according to the advisory.

Published Sep 9, 2026

Updated

Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<153.0.8010.36

Event History

Sep 9, 2026

CVE Published

via MITRE·12:09 AM

Data Sourced

via MITRE·12:09 AM

DescriptionWeakness

Frequently Asked Questions

Who is realistically exposed to this vulnerability?

Systems running Google Chrome before 153.0.8010.36 are exposed if a local attacker can run a program on the affected machine. The issue is described as enabling code execution outside Chrome’s sandbox.

What does an attacker need to exploit it?

The attacker needs local access sufficient to execute a local program on the target system. The provided information does not indicate that remote or web-only exploitation is possible.

How can I determine whether a system is affected?

Check the installed Google Chrome version. Versions earlier than 153.0.8010.36 are affected according to the advisory.