{"id":"CVE-2026-87467","title":"Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program","summary":"Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-362"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T04:18:20.243","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87467","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/524453236","label":"chrome-cve-admin@google.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87467.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-87467"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87467"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T14:23:13.924227Z"},"epss":0.00079,"epssPercentile":0.00173,"scores":{"nvd":8.1,"vendor":7.8,"adp":8.1},"ingestedAt":"2026-09-09T01:17:17.512Z","slug":"CVE-2026-87467","body":"## Overview\n\nRace condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87467.json)","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":44.6,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202239,"id":"CVE-2026-87467","ts":1789400065184,"field":"cvss","old":null,"new":"8.1"},{"seq":202238,"id":"CVE-2026-87467","ts":1789400065184,"field":"severity","old":"none","new":"high"},{"seq":200966,"id":"CVE-2026-87467","ts":1789397618874,"field":"cvss","old":"8.1","new":null},{"seq":200965,"id":"CVE-2026-87467","ts":1789397618874,"field":"severity","old":"high","new":"none"},{"seq":199659,"id":"CVE-2026-87467","ts":1789395565554,"field":"cvss","old":null,"new":"8.1"},{"seq":199658,"id":"CVE-2026-87467","ts":1789395565554,"field":"severity","old":"none","new":"high"},{"seq":198904,"id":"CVE-2026-87467","ts":1789392253789,"field":"cvss","old":"8.1","new":null},{"seq":198903,"id":"CVE-2026-87467","ts":1789392253789,"field":"severity","old":"high","new":"none"},{"seq":197237,"id":"CVE-2026-87467","ts":1789384296134,"field":"cvss","old":null,"new":"8.1"},{"seq":197236,"id":"CVE-2026-87467","ts":1789384296134,"field":"severity","old":"none","new":"high"},{"seq":196511,"id":"CVE-2026-87467","ts":1789383758627,"field":"cvss","old":"8.1","new":null},{"seq":196510,"id":"CVE-2026-87467","ts":1789383758627,"field":"severity","old":"high","new":"none"},{"seq":195415,"id":"CVE-2026-87467","ts":1789380576960,"field":"cvss","old":null,"new":"8.1"},{"seq":195414,"id":"CVE-2026-87467","ts":1789380576960,"field":"severity","old":"none","new":"high"},{"seq":194366,"id":"CVE-2026-87467","ts":1789378785509,"field":"cvss","old":"8.1","new":null},{"seq":194365,"id":"CVE-2026-87467","ts":1789378785509,"field":"severity","old":"high","new":"none"},{"seq":193153,"id":"CVE-2026-87467","ts":1789376520080,"field":"cvss","old":null,"new":"8.1"},{"seq":193152,"id":"CVE-2026-87467","ts":1789376520080,"field":"severity","old":"none","new":"high"},{"seq":191940,"id":"CVE-2026-87467","ts":1789373633759,"field":"cvss","old":"8.1","new":null},{"seq":191939,"id":"CVE-2026-87467","ts":1789373633759,"field":"severity","old":"high","new":"none"},{"seq":190725,"id":"CVE-2026-87467","ts":1789369486872,"field":"cvss","old":null,"new":"8.1"},{"seq":190724,"id":"CVE-2026-87467","ts":1789369486872,"field":"severity","old":"none","new":"high"},{"seq":189512,"id":"CVE-2026-87467","ts":1789368454581,"field":"cvss","old":"8.1","new":null},{"seq":189511,"id":"CVE-2026-87467","ts":1789368454581,"field":"severity","old":"high","new":"none"},{"seq":188295,"id":"CVE-2026-87467","ts":1789365236054,"field":"cvss","old":null,"new":"8.1"},{"seq":188294,"id":"CVE-2026-87467","ts":1789365236054,"field":"severity","old":"none","new":"high"},{"seq":187082,"id":"CVE-2026-87467","ts":1789363474207,"field":"cvss","old":"8.1","new":null},{"seq":187081,"id":"CVE-2026-87467","ts":1789363474207,"field":"severity","old":"high","new":"none"},{"seq":185868,"id":"CVE-2026-87467","ts":1789361234678,"field":"cvss","old":null,"new":"8.1"},{"seq":185867,"id":"CVE-2026-87467","ts":1789361234678,"field":"severity","old":"none","new":"high"},{"seq":184655,"id":"CVE-2026-87467","ts":1789358370753,"field":"cvss","old":"8.1","new":null},{"seq":184654,"id":"CVE-2026-87467","ts":1789358370753,"field":"severity","old":"high","new":"none"},{"seq":182905,"id":"CVE-2026-87467","ts":1789354322452,"field":"cvss","old":null,"new":"8.1"},{"seq":182904,"id":"CVE-2026-87467","ts":1789354322452,"field":"severity","old":"none","new":"high"},{"seq":181698,"id":"CVE-2026-87467","ts":1789353328932,"field":"cvss","old":"8.1","new":null},{"seq":181697,"id":"CVE-2026-87467","ts":1789353328932,"field":"severity","old":"high","new":"none"},{"seq":180491,"id":"CVE-2026-87467","ts":1789350290004,"field":"cvss","old":null,"new":"8.1"},{"seq":180490,"id":"CVE-2026-87467","ts":1789350290004,"field":"severity","old":"none","new":"high"},{"seq":179284,"id":"CVE-2026-87467","ts":1789348300974,"field":"cvss","old":"8.1","new":null},{"seq":179283,"id":"CVE-2026-87467","ts":1789348300974,"field":"severity","old":"high","new":"none"},{"seq":178077,"id":"CVE-2026-87467","ts":1789346377062,"field":"cvss","old":null,"new":"8.1"},{"seq":178076,"id":"CVE-2026-87467","ts":1789346377062,"field":"severity","old":"none","new":"high"},{"seq":176870,"id":"CVE-2026-87467","ts":1789343186917,"field":"cvss","old":"8.1","new":null},{"seq":176869,"id":"CVE-2026-87467","ts":1789343186917,"field":"severity","old":"high","new":"none"},{"seq":174987,"id":"CVE-2026-87467","ts":1789334883607,"field":"cvss","old":null,"new":"8.1"},{"seq":174986,"id":"CVE-2026-87467","ts":1789334883607,"field":"severity","old":"none","new":"high"},{"seq":173782,"id":"CVE-2026-87467","ts":1789333702810,"field":"cvss","old":"8.1","new":null},{"seq":173781,"id":"CVE-2026-87467","ts":1789333702810,"field":"severity","old":"high","new":"none"},{"seq":172596,"id":"CVE-2026-87467","ts":1789331096035,"field":"cvss","old":null,"new":"8.1"},{"seq":172595,"id":"CVE-2026-87467","ts":1789331096035,"field":"severity","old":"none","new":"high"}]}