CVE-2026-87491: Google Chromium V8

Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Vendor: Google
Product: Chromium V8
Vulnerability: Google Chromium V8 Out of Bounds Write Vulnerability
Date added: Sep 9, 2026
CISA due date (U.S. federal agencies): Sep 23, 2026
Known ransomware campaign use: Unknown
Weakness (CWE): CWE-787

References

NVD — CVE-2026-87491
chromereleases.googleblog.com
www.cisa.gov
www.cisa.gov
nvd.nist.gov

This site summarizes CISA's catalog for information only. It is not security advice — follow your vendor's guidance and official advisories.

Last updated: Oct 4, 2026 17:31 UTC · Catalog version 2026.10.02