{"id":"CVE-2026-87579","title":"Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page","summary":"Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T04:18:26.850","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87579","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/504690157","label":"chrome-cve-admin@google.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87579.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-87579"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87579"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T12:46:19.349466Z"},"epss":0.00429,"epssPercentile":0.36706,"ingestedAt":"2026-09-09T01:17:17.510Z","slug":"CVE-2026-87579","body":"## Overview\n\nBuffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87579.json)","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":202469,"id":"CVE-2026-87579","ts":1789400077806,"field":"cvss","old":null,"new":"8.8"},{"seq":202468,"id":"CVE-2026-87579","ts":1789400077806,"field":"severity","old":"none","new":"high"},{"seq":201196,"id":"CVE-2026-87579","ts":1789397620265,"field":"cvss","old":"8.8","new":null},{"seq":201195,"id":"CVE-2026-87579","ts":1789397620265,"field":"severity","old":"high","new":"none"},{"seq":199889,"id":"CVE-2026-87579","ts":1789395578217,"field":"cvss","old":null,"new":"8.8"},{"seq":199888,"id":"CVE-2026-87579","ts":1789395578217,"field":"severity","old":"none","new":"high"},{"seq":199130,"id":"CVE-2026-87579","ts":1789392260330,"field":"cvss","old":"8.8","new":null},{"seq":199129,"id":"CVE-2026-87579","ts":1789392260330,"field":"severity","old":"high","new":"none"},{"seq":197463,"id":"CVE-2026-87579","ts":1789384296870,"field":"cvss","old":null,"new":"8.8"},{"seq":197462,"id":"CVE-2026-87579","ts":1789384296870,"field":"severity","old":"none","new":"high"},{"seq":196737,"id":"CVE-2026-87579","ts":1789383773493,"field":"cvss","old":"8.8","new":null},{"seq":196736,"id":"CVE-2026-87579","ts":1789383773493,"field":"severity","old":"high","new":"none"},{"seq":195641,"id":"CVE-2026-87579","ts":1789380578248,"field":"cvss","old":null,"new":"8.8"},{"seq":195640,"id":"CVE-2026-87579","ts":1789380578248,"field":"severity","old":"none","new":"high"},{"seq":194592,"id":"CVE-2026-87579","ts":1789378789484,"field":"cvss","old":"8.8","new":null},{"seq":194591,"id":"CVE-2026-87579","ts":1789378789484,"field":"severity","old":"high","new":"none"},{"seq":193379,"id":"CVE-2026-87579","ts":1789376520904,"field":"cvss","old":null,"new":"8.8"},{"seq":193378,"id":"CVE-2026-87579","ts":1789376520904,"field":"severity","old":"none","new":"high"},{"seq":192166,"id":"CVE-2026-87579","ts":1789373639292,"field":"cvss","old":"8.8","new":null},{"seq":192165,"id":"CVE-2026-87579","ts":1789373639292,"field":"severity","old":"high","new":"none"},{"seq":190951,"id":"CVE-2026-87579","ts":1789369487881,"field":"cvss","old":null,"new":"8.8"},{"seq":190950,"id":"CVE-2026-87579","ts":1789369487881,"field":"severity","old":"none","new":"high"},{"seq":189738,"id":"CVE-2026-87579","ts":1789368460865,"field":"cvss","old":"8.8","new":null},{"seq":189737,"id":"CVE-2026-87579","ts":1789368460865,"field":"severity","old":"high","new":"none"},{"seq":188521,"id":"CVE-2026-87579","ts":1789365236829,"field":"cvss","old":null,"new":"8.8"},{"seq":188520,"id":"CVE-2026-87579","ts":1789365236829,"field":"severity","old":"none","new":"high"},{"seq":187308,"id":"CVE-2026-87579","ts":1789363480200,"field":"cvss","old":"8.8","new":null},{"seq":187307,"id":"CVE-2026-87579","ts":1789363480200,"field":"severity","old":"high","new":"none"},{"seq":186094,"id":"CVE-2026-87579","ts":1789361235491,"field":"cvss","old":null,"new":"8.8"},{"seq":186093,"id":"CVE-2026-87579","ts":1789361235491,"field":"severity","old":"none","new":"high"},{"seq":184881,"id":"CVE-2026-87579","ts":1789358377232,"field":"cvss","old":"8.8","new":null},{"seq":184880,"id":"CVE-2026-87579","ts":1789358377232,"field":"severity","old":"high","new":"none"},{"seq":183130,"id":"CVE-2026-87579","ts":1789354323343,"field":"cvss","old":null,"new":"8.8"},{"seq":183129,"id":"CVE-2026-87579","ts":1789354323343,"field":"severity","old":"none","new":"high"},{"seq":181923,"id":"CVE-2026-87579","ts":1789353335179,"field":"cvss","old":"8.8","new":null},{"seq":181922,"id":"CVE-2026-87579","ts":1789353335179,"field":"severity","old":"high","new":"none"},{"seq":180716,"id":"CVE-2026-87579","ts":1789350290825,"field":"cvss","old":null,"new":"8.8"},{"seq":180715,"id":"CVE-2026-87579","ts":1789350290825,"field":"severity","old":"none","new":"high"},{"seq":179509,"id":"CVE-2026-87579","ts":1789348308492,"field":"cvss","old":"8.8","new":null},{"seq":179508,"id":"CVE-2026-87579","ts":1789348308492,"field":"severity","old":"high","new":"none"},{"seq":178302,"id":"CVE-2026-87579","ts":1789346377822,"field":"cvss","old":null,"new":"8.8"},{"seq":178301,"id":"CVE-2026-87579","ts":1789346377822,"field":"severity","old":"none","new":"high"},{"seq":177095,"id":"CVE-2026-87579","ts":1789343188440,"field":"cvss","old":"8.8","new":null},{"seq":177094,"id":"CVE-2026-87579","ts":1789343188440,"field":"severity","old":"high","new":"none"},{"seq":175212,"id":"CVE-2026-87579","ts":1789334884485,"field":"cvss","old":null,"new":"8.8"},{"seq":175211,"id":"CVE-2026-87579","ts":1789334884485,"field":"severity","old":"none","new":"high"},{"seq":174007,"id":"CVE-2026-87579","ts":1789333703598,"field":"cvss","old":"8.8","new":null},{"seq":174006,"id":"CVE-2026-87579","ts":1789333703598,"field":"severity","old":"high","new":"none"},{"seq":172821,"id":"CVE-2026-87579","ts":1789331096829,"field":"cvss","old":null,"new":"8.8"},{"seq":172820,"id":"CVE-2026-87579","ts":1789331096829,"field":"severity","old":"none","new":"high"}]}