CVE Tools
Track your stack

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

The Hacker NewsBy The Hacker News

Reported exploitedGoogle Chrome

Our summary

Google has released security updates for Chrome, addressing 230 vulnerabilities including a medium-severity out-of-bounds bug in the V8 engine that is currently being exploited in the wild. Identified as CVE-2026-87491, this flaw allows remote attackers to execute arbitrary code within the sandbox via crafted HTML content in versions prior to 153.0.8010.36.
The update also resolves five critical flaws in WebGL and Cast components, bringing the total number of actively exploited Chrome zero-days patched this year to seven. Users are strongly advised to upgrade to version 153.0.8010.36/.37 on Windows and macOS, or 153.0.8010.36 on Linux, to mitigate these risks.

Read at The Hacker News

The Hacker News publishes this story on its own site; we link to it rather than reprint it.

  1. SecurityWeekChrome 153 Patches Seventh Zero-Day of 2026CVE-2026-11645, CVE-2026-2441 +5
  2. Help Net SecurityGoogle fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)CVE-2026-11645, CVE-2026-2441 +5
  3. Хакер (xakep.ru)В браузере Chrome исправили шестую 0-day-уязвимость в этом годуCVE-2026-11645, CVE-2026-2441 +4
  4. Help Net SecurityGoogle patches actively exploited Chrome zero-day (CVE-2026-85046)CVE-2026-11645, CVE-2026-2441 +4
  5. BleepingComputerGoogle warns of new Chrome zero-day flaw exploited in attacksCVE-2026-11645, CVE-2026-2441 +4
  6. SecurityWeekGoogle Patches 6th Chrome Zero-Day of 2026CVE-2026-11645, CVE-2026-2441 +4
  7. The Hacker NewsGoogle Releases Chrome Update to Patch Actively Exploited V8 Zero-DayCVE-2026-11645, CVE-2026-2441 +4
  8. The Hacker News⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and MoreCVE-2026-11645, CVE-2026-2441 +3
  9. Хакер (xakep.ru)В Chrome исправили уязвимость нулевого дняCVE-2026-11645, CVE-2026-2441 +3
  10. The Hacker NewsChrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch NowCVE-2026-11645, CVE-2026-2441 +3

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store