{"id":"CVE-2026-87542","title":"Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page","summary":"Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T04:18:25.523","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87542","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/542756749","label":"chrome-cve-admin@google.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87542.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-87542"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87542"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T12:49:20.314508Z"},"epss":0.00303,"epssPercentile":0.23204,"ingestedAt":"2026-09-09T01:17:17.512Z","slug":"CVE-2026-87542","body":"## Overview\n\nUse after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87542.json)","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":202394,"id":"CVE-2026-87542","ts":1789400070788,"field":"cvss","old":null,"new":"8.8"},{"seq":202393,"id":"CVE-2026-87542","ts":1789400070788,"field":"severity","old":"none","new":"high"},{"seq":201121,"id":"CVE-2026-87542","ts":1789397619981,"field":"cvss","old":"8.8","new":null},{"seq":201120,"id":"CVE-2026-87542","ts":1789397619981,"field":"severity","old":"high","new":"none"},{"seq":199814,"id":"CVE-2026-87542","ts":1789395577924,"field":"cvss","old":null,"new":"8.8"},{"seq":199813,"id":"CVE-2026-87542","ts":1789395577924,"field":"severity","old":"none","new":"high"},{"seq":199055,"id":"CVE-2026-87542","ts":1789392260084,"field":"cvss","old":"8.8","new":null},{"seq":199054,"id":"CVE-2026-87542","ts":1789392260084,"field":"severity","old":"high","new":"none"},{"seq":197388,"id":"CVE-2026-87542","ts":1789384296618,"field":"cvss","old":null,"new":"8.8"},{"seq":197387,"id":"CVE-2026-87542","ts":1789384296618,"field":"severity","old":"none","new":"high"},{"seq":196662,"id":"CVE-2026-87542","ts":1789383768646,"field":"cvss","old":"8.8","new":null},{"seq":196661,"id":"CVE-2026-87542","ts":1789383768646,"field":"severity","old":"high","new":"none"},{"seq":195566,"id":"CVE-2026-87542","ts":1789380577998,"field":"cvss","old":null,"new":"8.8"},{"seq":195565,"id":"CVE-2026-87542","ts":1789380577998,"field":"severity","old":"none","new":"high"},{"seq":194517,"id":"CVE-2026-87542","ts":1789378789227,"field":"cvss","old":"8.8","new":null},{"seq":194516,"id":"CVE-2026-87542","ts":1789378789227,"field":"severity","old":"high","new":"none"},{"seq":193304,"id":"CVE-2026-87542","ts":1789376520640,"field":"cvss","old":null,"new":"8.8"},{"seq":193303,"id":"CVE-2026-87542","ts":1789376520640,"field":"severity","old":"none","new":"high"},{"seq":192091,"id":"CVE-2026-87542","ts":1789373639000,"field":"cvss","old":"8.8","new":null},{"seq":192090,"id":"CVE-2026-87542","ts":1789373639000,"field":"severity","old":"high","new":"none"},{"seq":190876,"id":"CVE-2026-87542","ts":1789369487535,"field":"cvss","old":null,"new":"8.8"},{"seq":190875,"id":"CVE-2026-87542","ts":1789369487535,"field":"severity","old":"none","new":"high"},{"seq":189663,"id":"CVE-2026-87542","ts":1789368460605,"field":"cvss","old":"8.8","new":null},{"seq":189662,"id":"CVE-2026-87542","ts":1789368460605,"field":"severity","old":"high","new":"none"},{"seq":188446,"id":"CVE-2026-87542","ts":1789365236565,"field":"cvss","old":null,"new":"8.8"},{"seq":188445,"id":"CVE-2026-87542","ts":1789365236565,"field":"severity","old":"none","new":"high"},{"seq":187233,"id":"CVE-2026-87542","ts":1789363479945,"field":"cvss","old":"8.8","new":null},{"seq":187232,"id":"CVE-2026-87542","ts":1789363479945,"field":"severity","old":"high","new":"none"},{"seq":186019,"id":"CVE-2026-87542","ts":1789361235204,"field":"cvss","old":null,"new":"8.8"},{"seq":186018,"id":"CVE-2026-87542","ts":1789361235204,"field":"severity","old":"none","new":"high"},{"seq":184806,"id":"CVE-2026-87542","ts":1789358376944,"field":"cvss","old":"8.8","new":null},{"seq":184805,"id":"CVE-2026-87542","ts":1789358376944,"field":"severity","old":"high","new":"none"},{"seq":183055,"id":"CVE-2026-87542","ts":1789354323052,"field":"cvss","old":null,"new":"8.8"},{"seq":183054,"id":"CVE-2026-87542","ts":1789354323052,"field":"severity","old":"none","new":"high"},{"seq":181848,"id":"CVE-2026-87542","ts":1789353334924,"field":"cvss","old":"8.8","new":null},{"seq":181847,"id":"CVE-2026-87542","ts":1789353334924,"field":"severity","old":"high","new":"none"},{"seq":180641,"id":"CVE-2026-87542","ts":1789350290548,"field":"cvss","old":null,"new":"8.8"},{"seq":180640,"id":"CVE-2026-87542","ts":1789350290548,"field":"severity","old":"none","new":"high"},{"seq":179434,"id":"CVE-2026-87542","ts":1789348308215,"field":"cvss","old":"8.8","new":null},{"seq":179433,"id":"CVE-2026-87542","ts":1789348308215,"field":"severity","old":"high","new":"none"},{"seq":178227,"id":"CVE-2026-87542","ts":1789346377571,"field":"cvss","old":null,"new":"8.8"},{"seq":178226,"id":"CVE-2026-87542","ts":1789346377571,"field":"severity","old":"none","new":"high"},{"seq":177020,"id":"CVE-2026-87542","ts":1789343188158,"field":"cvss","old":"8.8","new":null},{"seq":177019,"id":"CVE-2026-87542","ts":1789343188158,"field":"severity","old":"high","new":"none"},{"seq":175137,"id":"CVE-2026-87542","ts":1789334884202,"field":"cvss","old":null,"new":"8.8"},{"seq":175136,"id":"CVE-2026-87542","ts":1789334884202,"field":"severity","old":"none","new":"high"},{"seq":173932,"id":"CVE-2026-87542","ts":1789333703342,"field":"cvss","old":"8.8","new":null},{"seq":173931,"id":"CVE-2026-87542","ts":1789333703342,"field":"severity","old":"high","new":"none"},{"seq":172746,"id":"CVE-2026-87542","ts":1789331096575,"field":"cvss","old":null,"new":"8.8"},{"seq":172745,"id":"CVE-2026-87542","ts":1789331096575,"field":"severity","old":"none","new":"high"}]}