CVE-2026-87633: Use After Free

Q: Who can exploit this issue?

Exploitation requires a local attacker and UI interaction. The stated impact is arbitrary code execution outside the Chrome sandbox.

Q: Which Chrome versions are affected?

Google Chrome versions prior to 153.0.8010.36 are affected. Update to 153.0.8010.36 or a later version.

Q: Does the information indicate that a default Chrome installation is affected?

The available information does not identify any required non-default configuration. It identifies the vulnerable component as Views and requires local access plus UI interaction.

Published Sep 9, 2026

Updated

Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<153.0.8010.36

Event History

Sep 9, 2026

CVE Published

via MITRE·12:09 AM

Data Sourced

via MITRE·12:09 AM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

Exploitation requires a local attacker and UI interaction. The stated impact is arbitrary code execution outside the Chrome sandbox.

Which Chrome versions are affected?

Google Chrome versions prior to 153.0.8010.36 are affected. Update to 153.0.8010.36 or a later version.

Does the information indicate that a default Chrome installation is affected?

The available information does not identify any required non-default configuration. It identifies the vulnerable component as Views and requires local access plus UI interaction.