CVE-2026-87527: Buffer Overflow

Q: How can I determine whether an installation is affected?

Check the installed Google Chrome version. Versions earlier than 153.0.8010.36 are affected.

Q: What does an attacker need to exploit this issue?

The attacker can be remote and needs to cause the target to process a crafted HTML page. No local access is indicated in the available information.

Q: What is the impact if exploitation succeeds?

Successful exploitation can allow arbitrary code execution outside Chrome's sandbox.

Published Sep 9, 2026

Updated

Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Affected Software

1 affected component

Google Chrome<153.0.8010.36

Event History

Sep 9, 2026

CVE Published

via MITRE·12:09 AM

Data Sourced

via MITRE·12:09 AM

DescriptionWeakness

Frequently Asked Questions

How can I determine whether an installation is affected?

Check the installed Google Chrome version. Versions earlier than 153.0.8010.36 are affected.

What does an attacker need to exploit this issue?

The attacker can be remote and needs to cause the target to process a crafted HTML page. No local access is indicated in the available information.

What is the impact if exploitation succeeds?

Successful exploitation can allow arbitrary code execution outside Chrome's sandbox.