{"id":"CVE-2026-87492","title":"Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page","summary":"Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"critical","cvss":9.6,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-863"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T04:18:21.990","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87492","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/529123409","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org","exploit-available"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T13:30:52.486284Z"},"epss":0.00325,"epssPercentile":0.25856,"ingestedAt":"2026-09-09T01:17:17.512Z","exploits":{"github":1,"githubRepos":["https://github.com/valencenavy/IsolatedAnarchy-Public"],"checkedAt":"2026-09-23T07:15:10.906Z"},"exploitAvailable":true,"slug":"CVE-2026-87492","body":"## Overview\n\nIncorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"abyssal","depthScore":65,"depthScoreParts":{"impact":52.8,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":202294,"id":"CVE-2026-87492","ts":1789400065377,"field":"exploit_available","old":"false","new":"true"},{"seq":202293,"id":"CVE-2026-87492","ts":1789400065377,"field":"cvss","old":null,"new":"9.6"},{"seq":202292,"id":"CVE-2026-87492","ts":1789400065377,"field":"severity","old":"none","new":"critical"},{"seq":201021,"id":"CVE-2026-87492","ts":1789397619234,"field":"exploit_available","old":"true","new":"false"},{"seq":201020,"id":"CVE-2026-87492","ts":1789397619234,"field":"cvss","old":"9.6","new":null},{"seq":201019,"id":"CVE-2026-87492","ts":1789397619234,"field":"severity","old":"critical","new":"none"},{"seq":199714,"id":"CVE-2026-87492","ts":1789395569481,"field":"exploit_available","old":"false","new":"true"},{"seq":199713,"id":"CVE-2026-87492","ts":1789395569481,"field":"cvss","old":null,"new":"9.6"},{"seq":199712,"id":"CVE-2026-87492","ts":1789395569481,"field":"severity","old":"none","new":"critical"},{"seq":198955,"id":"CVE-2026-87492","ts":1789392257578,"field":"exploit_available","old":"true","new":"false"},{"seq":198954,"id":"CVE-2026-87492","ts":1789392257578,"field":"cvss","old":"9.6","new":null},{"seq":198953,"id":"CVE-2026-87492","ts":1789392257578,"field":"severity","old":"critical","new":"none"},{"seq":197288,"id":"CVE-2026-87492","ts":1789384296292,"field":"exploit_available","old":"false","new":"true"},{"seq":197287,"id":"CVE-2026-87492","ts":1789384296292,"field":"cvss","old":null,"new":"9.6"},{"seq":197286,"id":"CVE-2026-87492","ts":1789384296292,"field":"severity","old":"none","new":"critical"},{"seq":196562,"id":"CVE-2026-87492","ts":1789383761926,"field":"exploit_available","old":"true","new":"false"},{"seq":196561,"id":"CVE-2026-87492","ts":1789383761926,"field":"cvss","old":"9.6","new":null},{"seq":196560,"id":"CVE-2026-87492","ts":1789383761926,"field":"severity","old":"critical","new":"none"},{"seq":195466,"id":"CVE-2026-87492","ts":1789380577142,"field":"exploit_available","old":"false","new":"true"},{"seq":195465,"id":"CVE-2026-87492","ts":1789380577142,"field":"cvss","old":null,"new":"9.6"},{"seq":195464,"id":"CVE-2026-87492","ts":1789380577142,"field":"severity","old":"none","new":"critical"},{"seq":194417,"id":"CVE-2026-87492","ts":1789378785864,"field":"exploit_available","old":"true","new":"false"},{"seq":194416,"id":"CVE-2026-87492","ts":1789378785864,"field":"cvss","old":"9.6","new":null},{"seq":194415,"id":"CVE-2026-87492","ts":1789378785864,"field":"severity","old":"critical","new":"none"},{"seq":193204,"id":"CVE-2026-87492","ts":1789376520263,"field":"exploit_available","old":"false","new":"true"},{"seq":193203,"id":"CVE-2026-87492","ts":1789376520263,"field":"cvss","old":null,"new":"9.6"},{"seq":193202,"id":"CVE-2026-87492","ts":1789376520263,"field":"severity","old":"none","new":"critical"},{"seq":191991,"id":"CVE-2026-87492","ts":1789373636147,"field":"exploit_available","old":"true","new":"false"},{"seq":191990,"id":"CVE-2026-87492","ts":1789373636147,"field":"cvss","old":"9.6","new":null},{"seq":191989,"id":"CVE-2026-87492","ts":1789373636147,"field":"severity","old":"critical","new":"none"},{"seq":190776,"id":"CVE-2026-87492","ts":1789369487078,"field":"exploit_available","old":"false","new":"true"},{"seq":190775,"id":"CVE-2026-87492","ts":1789369487078,"field":"cvss","old":null,"new":"9.6"},{"seq":190774,"id":"CVE-2026-87492","ts":1789369487078,"field":"severity","old":"none","new":"critical"},{"seq":189563,"id":"CVE-2026-87492","ts":1789368458079,"field":"exploit_available","old":"true","new":"false"},{"seq":189562,"id":"CVE-2026-87492","ts":1789368458079,"field":"cvss","old":"9.6","new":null},{"seq":189561,"id":"CVE-2026-87492","ts":1789368458079,"field":"severity","old":"critical","new":"none"},{"seq":188346,"id":"CVE-2026-87492","ts":1789365236222,"field":"exploit_available","old":"false","new":"true"},{"seq":188345,"id":"CVE-2026-87492","ts":1789365236222,"field":"cvss","old":null,"new":"9.6"},{"seq":188344,"id":"CVE-2026-87492","ts":1789365236222,"field":"severity","old":"none","new":"critical"},{"seq":187133,"id":"CVE-2026-87492","ts":1789363477579,"field":"exploit_available","old":"true","new":"false"},{"seq":187132,"id":"CVE-2026-87492","ts":1789363477579,"field":"cvss","old":"9.6","new":null},{"seq":187131,"id":"CVE-2026-87492","ts":1789363477579,"field":"severity","old":"critical","new":"none"},{"seq":185919,"id":"CVE-2026-87492","ts":1789361234845,"field":"exploit_available","old":"false","new":"true"},{"seq":185918,"id":"CVE-2026-87492","ts":1789361234845,"field":"cvss","old":null,"new":"9.6"},{"seq":185917,"id":"CVE-2026-87492","ts":1789361234845,"field":"severity","old":"none","new":"critical"},{"seq":184706,"id":"CVE-2026-87492","ts":1789358374348,"field":"exploit_available","old":"true","new":"false"},{"seq":184705,"id":"CVE-2026-87492","ts":1789358374348,"field":"cvss","old":"9.6","new":null},{"seq":184704,"id":"CVE-2026-87492","ts":1789358374348,"field":"severity","old":"critical","new":"none"},{"seq":183327,"id":"CVE-2026-87492","ts":1789356095309,"field":"exploit_available","old":"false","new":"true"},{"seq":182955,"id":"CVE-2026-87492","ts":1789354322649,"field":"cvss","old":null,"new":"9.6"}]}