CVE-2026-87555: Google Chrome vulnerability

Q: Which Chrome deployments should be prioritized for updating?

Google Chrome on Android versions earlier than 153.0.8010.36 are affected.

Q: Does exploitation require local access or user-installed software?

No. The issue can be exploited remotely through a crafted HTML page.

Q: What is the security boundary impact if exploitation succeeds?

A successful attacker could read memory outside the sandbox.

Published Sep 9, 2026

Updated

Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Chrome<153.0.8010.36

Event History

Sep 9, 2026

CVE Published

via MITRE·12:09 AM

Data Sourced

via MITRE·12:09 AM

DescriptionWeakness

Frequently Asked Questions

Which Chrome deployments should be prioritized for updating?

Google Chrome on Android versions earlier than 153.0.8010.36 are affected.

Does exploitation require local access or user-installed software?

No. The issue can be exploited remotely through a crafted HTML page.

What is the security boundary impact if exploitation succeeds?

A successful attacker could read memory outside the sandbox.