{"id":"CVE-2026-87581","title":"Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page","summary":"Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"critical","cvss":9.6,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T04:18:27.020","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87581","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/553129531","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T13:30:16.519429Z"},"epss":0.00462,"epssPercentile":0.37274,"ingestedAt":"2026-09-09T01:17:17.511Z","slug":"CVE-2026-87581","body":"## Overview\n\nUse after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":52.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":202473,"id":"CVE-2026-87581","ts":1789400078216,"field":"cvss","old":null,"new":"9.6"},{"seq":202472,"id":"CVE-2026-87581","ts":1789400078216,"field":"severity","old":"none","new":"critical"},{"seq":201200,"id":"CVE-2026-87581","ts":1789397620280,"field":"cvss","old":"9.6","new":null},{"seq":201199,"id":"CVE-2026-87581","ts":1789397620280,"field":"severity","old":"critical","new":"none"},{"seq":199893,"id":"CVE-2026-87581","ts":1789395578231,"field":"cvss","old":null,"new":"9.6"},{"seq":199892,"id":"CVE-2026-87581","ts":1789395578231,"field":"severity","old":"none","new":"critical"},{"seq":199134,"id":"CVE-2026-87581","ts":1789392260343,"field":"cvss","old":"9.6","new":null},{"seq":199133,"id":"CVE-2026-87581","ts":1789392260343,"field":"severity","old":"critical","new":"none"},{"seq":197467,"id":"CVE-2026-87581","ts":1789384296882,"field":"cvss","old":null,"new":"9.6"},{"seq":197466,"id":"CVE-2026-87581","ts":1789384296882,"field":"severity","old":"none","new":"critical"},{"seq":196741,"id":"CVE-2026-87581","ts":1789383773758,"field":"cvss","old":"9.6","new":null},{"seq":196740,"id":"CVE-2026-87581","ts":1789383773758,"field":"severity","old":"critical","new":"none"},{"seq":195645,"id":"CVE-2026-87581","ts":1789380578261,"field":"cvss","old":null,"new":"9.6"},{"seq":195644,"id":"CVE-2026-87581","ts":1789380578261,"field":"severity","old":"none","new":"critical"},{"seq":194596,"id":"CVE-2026-87581","ts":1789378789498,"field":"cvss","old":"9.6","new":null},{"seq":194595,"id":"CVE-2026-87581","ts":1789378789498,"field":"severity","old":"critical","new":"none"},{"seq":193383,"id":"CVE-2026-87581","ts":1789376520919,"field":"cvss","old":null,"new":"9.6"},{"seq":193382,"id":"CVE-2026-87581","ts":1789376520919,"field":"severity","old":"none","new":"critical"},{"seq":192170,"id":"CVE-2026-87581","ts":1789373639306,"field":"cvss","old":"9.6","new":null},{"seq":192169,"id":"CVE-2026-87581","ts":1789373639306,"field":"severity","old":"critical","new":"none"},{"seq":190955,"id":"CVE-2026-87581","ts":1789369487897,"field":"cvss","old":null,"new":"9.6"},{"seq":190954,"id":"CVE-2026-87581","ts":1789369487897,"field":"severity","old":"none","new":"critical"},{"seq":189742,"id":"CVE-2026-87581","ts":1789368460878,"field":"cvss","old":"9.6","new":null},{"seq":189741,"id":"CVE-2026-87581","ts":1789368460878,"field":"severity","old":"critical","new":"none"},{"seq":188525,"id":"CVE-2026-87581","ts":1789365236842,"field":"cvss","old":null,"new":"9.6"},{"seq":188524,"id":"CVE-2026-87581","ts":1789365236842,"field":"severity","old":"none","new":"critical"},{"seq":187312,"id":"CVE-2026-87581","ts":1789363480213,"field":"cvss","old":"9.6","new":null},{"seq":187311,"id":"CVE-2026-87581","ts":1789363480213,"field":"severity","old":"critical","new":"none"},{"seq":186098,"id":"CVE-2026-87581","ts":1789361235506,"field":"cvss","old":null,"new":"9.6"},{"seq":186097,"id":"CVE-2026-87581","ts":1789361235506,"field":"severity","old":"none","new":"critical"},{"seq":184885,"id":"CVE-2026-87581","ts":1789358377247,"field":"cvss","old":"9.6","new":null},{"seq":184884,"id":"CVE-2026-87581","ts":1789358377247,"field":"severity","old":"critical","new":"none"},{"seq":183134,"id":"CVE-2026-87581","ts":1789354323359,"field":"cvss","old":null,"new":"9.6"},{"seq":183133,"id":"CVE-2026-87581","ts":1789354323359,"field":"severity","old":"none","new":"critical"},{"seq":181927,"id":"CVE-2026-87581","ts":1789353335193,"field":"cvss","old":"9.6","new":null},{"seq":181926,"id":"CVE-2026-87581","ts":1789353335193,"field":"severity","old":"critical","new":"none"},{"seq":180720,"id":"CVE-2026-87581","ts":1789350290839,"field":"cvss","old":null,"new":"9.6"},{"seq":180719,"id":"CVE-2026-87581","ts":1789350290839,"field":"severity","old":"none","new":"critical"},{"seq":179513,"id":"CVE-2026-87581","ts":1789348308508,"field":"cvss","old":"9.6","new":null},{"seq":179512,"id":"CVE-2026-87581","ts":1789348308508,"field":"severity","old":"critical","new":"none"},{"seq":178306,"id":"CVE-2026-87581","ts":1789346377837,"field":"cvss","old":null,"new":"9.6"},{"seq":178305,"id":"CVE-2026-87581","ts":1789346377837,"field":"severity","old":"none","new":"critical"},{"seq":177099,"id":"CVE-2026-87581","ts":1789343188457,"field":"cvss","old":"9.6","new":null},{"seq":177098,"id":"CVE-2026-87581","ts":1789343188457,"field":"severity","old":"critical","new":"none"},{"seq":175216,"id":"CVE-2026-87581","ts":1789334884501,"field":"cvss","old":null,"new":"9.6"},{"seq":175215,"id":"CVE-2026-87581","ts":1789334884501,"field":"severity","old":"none","new":"critical"},{"seq":174011,"id":"CVE-2026-87581","ts":1789333703612,"field":"cvss","old":"9.6","new":null},{"seq":174010,"id":"CVE-2026-87581","ts":1789333703612,"field":"severity","old":"critical","new":"none"},{"seq":172825,"id":"CVE-2026-87581","ts":1789331096842,"field":"cvss","old":null,"new":"9.6"},{"seq":172824,"id":"CVE-2026-87581","ts":1789331096842,"field":"severity","old":"none","new":"critical"}]}