CVE-2026-87542: Use After Free
Published Sep 9, 2026
·Updated
Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
1 affected component
Google Google Chrome<153.0.8010.36
Event History
Sep 9, 2026
CVE Published
via MITRE·12:09 AM
Data Sourced
via MITRE·12:09 AM
DescriptionWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker needs to cause Chrome to process a crafted HTML page. The reported impact is arbitrary code execution inside the Chrome sandbox.
2
Which Chrome versions are affected?
Google Chrome versions prior to 153.0.8010.36 are affected. Updating to version 153.0.8010.36 or later addresses the affected version range.
3
Is this a sandbox escape?
No sandbox escape is described in the available information. The stated code-execution impact is inside the Chrome sandbox.