THREATOPS
THREAT OPSThreat News › CVE-2026-87464: RCE outside sandbox in Chromium prior to 153.0.8010.36

CVE-2026-87464: RCE outside sandbox in Chromium prior to 153.0.8010.36

medoss_secPublished 2026-09-10

<p>Posted by Valtteri Vuorikoski on Sep 10</p> Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote<br /> attacker to execute arbitrary code outside the sandbox via a crafted HTML<br /> page. (Chromium security severity: Critical)<br /> <br /> The Chromium issue tracker link is restricted so further details are not<br /> available. While product is listed as Chrome

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/710