CVE-2026-87528: Google Chrome vulnerability

Q: Which deployments are affected?

Google Chrome on Windows is affected when the installed version is earlier than 153.0.8010.36.

Q: What must an attacker do to trigger the issue?

The attacker needs to cause Chrome to process a crafted HTML page. The issue is described as remotely exploitable.

Q: How can administrators determine whether remediation is needed?

Check the installed Chrome version on Windows. Systems running a version earlier than 153.0.8010.36 require an update.

Published Sep 9, 2026

Updated

Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Chrome<153.0.8010.36

Event History

Sep 9, 2026

CVE Published

via MITRE·12:09 AM

Data Sourced

via MITRE·12:09 AM

DescriptionWeakness

Frequently Asked Questions

Which deployments are affected?

Google Chrome on Windows is affected when the installed version is earlier than 153.0.8010.36.

What must an attacker do to trigger the issue?

The attacker needs to cause Chrome to process a crafted HTML page. The issue is described as remotely exploitable.

How can administrators determine whether remediation is needed?

Check the installed Chrome version on Windows. Systems running a version earlier than 153.0.8010.36 require an update.