CVE-2026-87650: Google Chrome vulnerability

Q: Which Chrome versions need to be updated?

Google Chrome versions earlier than 153.0.8010.36 are affected. Update to 153.0.8010.36 or a later version.

Q: What does an attacker need to exploit this issue?

The issue can be triggered remotely through a crafted HTML page. This implies the attacker needs a victim to load attacker-controlled web content in Chrome.

Q: What is the potential impact if exploitation succeeds?

A successful attack could potentially execute arbitrary code outside Chrome's sandbox.

Published Sep 9, 2026

Updated

Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<153.0.8010.36

Event History

Sep 9, 2026

CVE Published

via MITRE·12:09 AM

Data Sourced

via MITRE·12:09 AM

DescriptionWeakness

Frequently Asked Questions

Which Chrome versions need to be updated?

Google Chrome versions earlier than 153.0.8010.36 are affected. Update to 153.0.8010.36 or a later version.

What does an attacker need to exploit this issue?

The issue can be triggered remotely through a crafted HTML page. This implies the attacker needs a victim to load attacker-controlled web content in Chrome.

What is the potential impact if exploitation succeeds?

A successful attack could potentially execute arbitrary code outside Chrome's sandbox.