CVE-2026-87533: Use After Free
Published Sep 9, 2026
·Updated
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)
Affected Software
1 affected component
Google Google Chrome<153.0.8010.36
Event History
Sep 9, 2026
CVE Published
via MITRE·12:09 AM
Data Sourced
via MITRE·12:09 AM
DescriptionWeakness
Frequently Asked Questions
1
Who is exposed to this issue?
The issue affects Google Chrome versions prior to 153.0.8010.36. Exploitation requires a local attacker and a local program.
2
What level of access does an attacker need?
An attacker must be able to run a program locally on the affected system. The vulnerability could allow that local attacker to execute arbitrary code outside Chrome's sandbox.
3
What version addresses the issue?
Chrome 153.0.8010.36 addresses the issue; versions earlier than that are affected.