{"id":"CVE-2026-87489","title":"Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted Chrome extension","summary":"Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-119"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T04:18:21.650","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87489","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/539453394","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T12:57:30.330937Z"},"epss":0.00233,"epssPercentile":0.14416,"ingestedAt":"2026-09-09T01:17:17.505Z","slug":"CVE-2026-87489","body":"## Overview\n\nMemory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202283,"id":"CVE-2026-87489","ts":1789400065353,"field":"cvss","old":null,"new":"8.8"},{"seq":202282,"id":"CVE-2026-87489","ts":1789400065353,"field":"severity","old":"none","new":"high"},{"seq":201010,"id":"CVE-2026-87489","ts":1789397619191,"field":"cvss","old":"8.8","new":null},{"seq":201009,"id":"CVE-2026-87489","ts":1789397619191,"field":"severity","old":"high","new":"none"},{"seq":199703,"id":"CVE-2026-87489","ts":1789395569013,"field":"cvss","old":null,"new":"8.8"},{"seq":199702,"id":"CVE-2026-87489","ts":1789395569013,"field":"severity","old":"none","new":"high"},{"seq":198944,"id":"CVE-2026-87489","ts":1789392257121,"field":"cvss","old":"8.8","new":null},{"seq":198943,"id":"CVE-2026-87489","ts":1789392257121,"field":"severity","old":"high","new":"none"},{"seq":197277,"id":"CVE-2026-87489","ts":1789384296274,"field":"cvss","old":null,"new":"8.8"},{"seq":197276,"id":"CVE-2026-87489","ts":1789384296274,"field":"severity","old":"none","new":"high"},{"seq":196551,"id":"CVE-2026-87489","ts":1789383761531,"field":"cvss","old":"8.8","new":null},{"seq":196550,"id":"CVE-2026-87489","ts":1789383761531,"field":"severity","old":"high","new":"none"},{"seq":195455,"id":"CVE-2026-87489","ts":1789380577120,"field":"cvss","old":null,"new":"8.8"},{"seq":195454,"id":"CVE-2026-87489","ts":1789380577120,"field":"severity","old":"none","new":"high"},{"seq":194406,"id":"CVE-2026-87489","ts":1789378785822,"field":"cvss","old":"8.8","new":null},{"seq":194405,"id":"CVE-2026-87489","ts":1789378785822,"field":"severity","old":"high","new":"none"},{"seq":193193,"id":"CVE-2026-87489","ts":1789376520241,"field":"cvss","old":null,"new":"8.8"},{"seq":193192,"id":"CVE-2026-87489","ts":1789376520241,"field":"severity","old":"none","new":"high"},{"seq":191980,"id":"CVE-2026-87489","ts":1789373635732,"field":"cvss","old":"8.8","new":null},{"seq":191979,"id":"CVE-2026-87489","ts":1789373635732,"field":"severity","old":"high","new":"none"},{"seq":190765,"id":"CVE-2026-87489","ts":1789369487053,"field":"cvss","old":null,"new":"8.8"},{"seq":190764,"id":"CVE-2026-87489","ts":1789369487053,"field":"severity","old":"none","new":"high"},{"seq":189552,"id":"CVE-2026-87489","ts":1789368457661,"field":"cvss","old":"8.8","new":null},{"seq":189551,"id":"CVE-2026-87489","ts":1789368457661,"field":"severity","old":"high","new":"none"},{"seq":188335,"id":"CVE-2026-87489","ts":1789365236202,"field":"cvss","old":null,"new":"8.8"},{"seq":188334,"id":"CVE-2026-87489","ts":1789365236202,"field":"severity","old":"none","new":"high"},{"seq":187122,"id":"CVE-2026-87489","ts":1789363477177,"field":"cvss","old":"8.8","new":null},{"seq":187121,"id":"CVE-2026-87489","ts":1789363477177,"field":"severity","old":"high","new":"none"},{"seq":185908,"id":"CVE-2026-87489","ts":1789361234825,"field":"cvss","old":null,"new":"8.8"},{"seq":185907,"id":"CVE-2026-87489","ts":1789361234825,"field":"severity","old":"none","new":"high"},{"seq":184695,"id":"CVE-2026-87489","ts":1789358373916,"field":"cvss","old":"8.8","new":null},{"seq":184694,"id":"CVE-2026-87489","ts":1789358373916,"field":"severity","old":"high","new":"none"},{"seq":182945,"id":"CVE-2026-87489","ts":1789354322625,"field":"cvss","old":null,"new":"8.8"},{"seq":182944,"id":"CVE-2026-87489","ts":1789354322625,"field":"severity","old":"none","new":"high"},{"seq":181738,"id":"CVE-2026-87489","ts":1789353331841,"field":"cvss","old":"8.8","new":null},{"seq":181737,"id":"CVE-2026-87489","ts":1789353331841,"field":"severity","old":"high","new":"none"},{"seq":180531,"id":"CVE-2026-87489","ts":1789350290163,"field":"cvss","old":null,"new":"8.8"},{"seq":180530,"id":"CVE-2026-87489","ts":1789350290163,"field":"severity","old":"none","new":"high"},{"seq":179324,"id":"CVE-2026-87489","ts":1789348304444,"field":"cvss","old":"8.8","new":null},{"seq":179323,"id":"CVE-2026-87489","ts":1789348304444,"field":"severity","old":"high","new":"none"},{"seq":178117,"id":"CVE-2026-87489","ts":1789346377209,"field":"cvss","old":null,"new":"8.8"},{"seq":178116,"id":"CVE-2026-87489","ts":1789346377209,"field":"severity","old":"none","new":"high"},{"seq":176910,"id":"CVE-2026-87489","ts":1789343187222,"field":"cvss","old":"8.8","new":null},{"seq":176909,"id":"CVE-2026-87489","ts":1789343187222,"field":"severity","old":"high","new":"none"},{"seq":175027,"id":"CVE-2026-87489","ts":1789334883778,"field":"cvss","old":null,"new":"8.8"},{"seq":175026,"id":"CVE-2026-87489","ts":1789334883778,"field":"severity","old":"none","new":"high"},{"seq":173822,"id":"CVE-2026-87489","ts":1789333702960,"field":"cvss","old":"8.8","new":null},{"seq":173821,"id":"CVE-2026-87489","ts":1789333702960,"field":"severity","old":"high","new":"none"},{"seq":172636,"id":"CVE-2026-87489","ts":1789331096193,"field":"cvss","old":null,"new":"8.8"},{"seq":172635,"id":"CVE-2026-87489","ts":1789331096193,"field":"severity","old":"none","new":"high"}]}