CVE-2026-87602: Google Google Chrome vulnerability
Published Sep 9, 2026
·Updated
Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Affected Software
2 affected components
Google Google Chrome<153.0.8010.36
Google ANGLE
Event History
Sep 9, 2026
CVE Published
via MITRE·12:10 AM
Data Sourced
via MITRE·12:10 AM
DescriptionWeakness
Frequently Asked Questions
1
Which systems are affected?
The issue affects Google Chrome on Windows before version 153.0.8010.36. The vulnerability is in ANGLE, which Chrome uses on the affected platform.
2
What does an attacker need to exploit this issue?
An attacker would need to induce a user to load a crafted HTML page remotely. Successful exploitation could allow reading memory outside Chrome's sandbox.
3
Does the available information identify a workaround if updating is not immediately possible?
No workaround or mitigation is provided in the available information. Updating Chrome to version 153.0.8010.36 or later is the stated version boundary for the issue.