{"id":"CVE-2026-87464","title":"Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page","summary":"Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)","severity":"critical","cvss":9.6,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T17:17:06.567","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87464","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/544163112","label":"chrome-cve-admin@google.com"},{"url":"http://www.openwall.com/lists/oss-security/2026/09/10/17","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://chromium-review.googlesource.com/c/angle/angle/+/8266365","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T13:31:10.313556Z"},"epss":0.00586,"epssPercentile":0.46466,"ingestedAt":"2026-09-09T01:17:17.513Z","slug":"CVE-2026-87464","body":"## Overview\n\nUse after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":52.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":202233,"id":"CVE-2026-87464","ts":1789400065159,"field":"cvss","old":null,"new":"9.6"},{"seq":202232,"id":"CVE-2026-87464","ts":1789400065159,"field":"severity","old":"none","new":"critical"},{"seq":200960,"id":"CVE-2026-87464","ts":1789397618830,"field":"cvss","old":"9.6","new":null},{"seq":200959,"id":"CVE-2026-87464","ts":1789397618830,"field":"severity","old":"critical","new":"none"},{"seq":199653,"id":"CVE-2026-87464","ts":1789395565069,"field":"cvss","old":null,"new":"9.6"},{"seq":199652,"id":"CVE-2026-87464","ts":1789395565069,"field":"severity","old":"none","new":"critical"},{"seq":198898,"id":"CVE-2026-87464","ts":1789392253337,"field":"cvss","old":"9.6","new":null},{"seq":198897,"id":"CVE-2026-87464","ts":1789392253337,"field":"severity","old":"critical","new":"none"},{"seq":197231,"id":"CVE-2026-87464","ts":1789384296115,"field":"cvss","old":null,"new":"9.6"},{"seq":197230,"id":"CVE-2026-87464","ts":1789384296115,"field":"severity","old":"none","new":"critical"},{"seq":196505,"id":"CVE-2026-87464","ts":1789383758228,"field":"cvss","old":"9.6","new":null},{"seq":196504,"id":"CVE-2026-87464","ts":1789383758228,"field":"severity","old":"critical","new":"none"},{"seq":195409,"id":"CVE-2026-87464","ts":1789380576939,"field":"cvss","old":null,"new":"9.6"},{"seq":195408,"id":"CVE-2026-87464","ts":1789380576939,"field":"severity","old":"none","new":"critical"},{"seq":194360,"id":"CVE-2026-87464","ts":1789378785467,"field":"cvss","old":"9.6","new":null},{"seq":194359,"id":"CVE-2026-87464","ts":1789378785467,"field":"severity","old":"critical","new":"none"},{"seq":193147,"id":"CVE-2026-87464","ts":1789376520059,"field":"cvss","old":null,"new":"9.6"},{"seq":193146,"id":"CVE-2026-87464","ts":1789376520059,"field":"severity","old":"none","new":"critical"},{"seq":191934,"id":"CVE-2026-87464","ts":1789373633716,"field":"cvss","old":"9.6","new":null},{"seq":191933,"id":"CVE-2026-87464","ts":1789373633716,"field":"severity","old":"critical","new":"none"},{"seq":190719,"id":"CVE-2026-87464","ts":1789369486638,"field":"cvss","old":null,"new":"9.6"},{"seq":190718,"id":"CVE-2026-87464","ts":1789369486638,"field":"severity","old":"none","new":"critical"},{"seq":189506,"id":"CVE-2026-87464","ts":1789368454162,"field":"cvss","old":"9.6","new":null},{"seq":189505,"id":"CVE-2026-87464","ts":1789368454162,"field":"severity","old":"critical","new":"none"},{"seq":188289,"id":"CVE-2026-87464","ts":1789365236033,"field":"cvss","old":null,"new":"9.6"},{"seq":188288,"id":"CVE-2026-87464","ts":1789365236033,"field":"severity","old":"none","new":"critical"},{"seq":187076,"id":"CVE-2026-87464","ts":1789363473797,"field":"cvss","old":"9.6","new":null},{"seq":187075,"id":"CVE-2026-87464","ts":1789363473797,"field":"severity","old":"critical","new":"none"},{"seq":185862,"id":"CVE-2026-87464","ts":1789361234658,"field":"cvss","old":null,"new":"9.6"},{"seq":185861,"id":"CVE-2026-87464","ts":1789361234658,"field":"severity","old":"none","new":"critical"},{"seq":184649,"id":"CVE-2026-87464","ts":1789358370329,"field":"cvss","old":"9.6","new":null},{"seq":184648,"id":"CVE-2026-87464","ts":1789358370329,"field":"severity","old":"critical","new":"none"},{"seq":182899,"id":"CVE-2026-87464","ts":1789354322429,"field":"cvss","old":null,"new":"9.6"},{"seq":182898,"id":"CVE-2026-87464","ts":1789354322429,"field":"severity","old":"none","new":"critical"},{"seq":181692,"id":"CVE-2026-87464","ts":1789353328530,"field":"cvss","old":"9.6","new":null},{"seq":181691,"id":"CVE-2026-87464","ts":1789353328530,"field":"severity","old":"critical","new":"none"},{"seq":180485,"id":"CVE-2026-87464","ts":1789350289984,"field":"cvss","old":null,"new":"9.6"},{"seq":180484,"id":"CVE-2026-87464","ts":1789350289984,"field":"severity","old":"none","new":"critical"},{"seq":179278,"id":"CVE-2026-87464","ts":1789348300503,"field":"cvss","old":"9.6","new":null},{"seq":179277,"id":"CVE-2026-87464","ts":1789348300503,"field":"severity","old":"critical","new":"none"},{"seq":178071,"id":"CVE-2026-87464","ts":1789346377042,"field":"cvss","old":null,"new":"9.6"},{"seq":178070,"id":"CVE-2026-87464","ts":1789346377042,"field":"severity","old":"none","new":"critical"},{"seq":176864,"id":"CVE-2026-87464","ts":1789343186876,"field":"cvss","old":"9.6","new":null},{"seq":176863,"id":"CVE-2026-87464","ts":1789343186876,"field":"severity","old":"critical","new":"none"},{"seq":174981,"id":"CVE-2026-87464","ts":1789334883584,"field":"cvss","old":null,"new":"9.6"},{"seq":174980,"id":"CVE-2026-87464","ts":1789334883584,"field":"severity","old":"none","new":"critical"},{"seq":173776,"id":"CVE-2026-87464","ts":1789333702789,"field":"cvss","old":"9.6","new":null},{"seq":173775,"id":"CVE-2026-87464","ts":1789333702789,"field":"severity","old":"critical","new":"none"},{"seq":172590,"id":"CVE-2026-87464","ts":1789331096015,"field":"cvss","old":null,"new":"9.6"},{"seq":172589,"id":"CVE-2026-87464","ts":1789331096015,"field":"severity","old":"none","new":"critical"}]}