Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-87639
High · 8.3
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87637
Critical · 9.6
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87634
Critical · 9.6
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87633
High · 8.6
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)
CVE-2026-87628
High · 8.3
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)
CVE-2026-87625
High · 8.8
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-87617
High · 8.8
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87609
Critical · 9.6
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)
CVE-2026-87607
Critical · 9.6
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87588
High · 8.8
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87587
High · 8.8
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87581
Critical · 9.6
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87578
High · 8.3
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)
CVE-2026-87558
Critical · 9.6
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87542
High · 8.8
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87536
High · 8.8
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87533
High · 8.1
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)
CVE-2026-87526
Critical · 9.6
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: Medium)
CVE-2026-87524
High · 8.3
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87520
Critical · 9.6
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87514
High · 8.1
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
CVE-2026-87512
Critical · 9.6
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87504
Critical · 9.6
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-87494
Critical · 9.6
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87488
Critical · 9.6
CWE-416 Sep 8, 2026
Use After Free in Google Chrome
Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)