{"id":"CVE-2026-87601","title":"Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page","summary":"Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-362"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T04:18:27.860","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87601","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/541604100","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T13:00:37.898572Z"},"epss":0.00182,"epssPercentile":0.08023,"ingestedAt":"2026-09-09T01:17:17.505Z","slug":"CVE-2026-87601","body":"## Overview\n\nRace condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202513,"id":"CVE-2026-87601","ts":1789400085746,"field":"cvss","old":null,"new":"7.5"},{"seq":202512,"id":"CVE-2026-87601","ts":1789400085746,"field":"severity","old":"none","new":"high"},{"seq":201240,"id":"CVE-2026-87601","ts":1789397620424,"field":"cvss","old":"7.5","new":null},{"seq":201239,"id":"CVE-2026-87601","ts":1789397620424,"field":"severity","old":"high","new":"none"},{"seq":199933,"id":"CVE-2026-87601","ts":1789395578367,"field":"cvss","old":null,"new":"7.5"},{"seq":199932,"id":"CVE-2026-87601","ts":1789395578367,"field":"severity","old":"none","new":"high"},{"seq":199174,"id":"CVE-2026-87601","ts":1789392260485,"field":"cvss","old":"7.5","new":null},{"seq":199173,"id":"CVE-2026-87601","ts":1789392260485,"field":"severity","old":"high","new":"none"},{"seq":197507,"id":"CVE-2026-87601","ts":1789384297008,"field":"cvss","old":null,"new":"7.5"},{"seq":197506,"id":"CVE-2026-87601","ts":1789384297008,"field":"severity","old":"none","new":"high"},{"seq":196781,"id":"CVE-2026-87601","ts":1789383776372,"field":"cvss","old":"7.5","new":null},{"seq":196780,"id":"CVE-2026-87601","ts":1789383776372,"field":"severity","old":"high","new":"none"},{"seq":195685,"id":"CVE-2026-87601","ts":1789380578395,"field":"cvss","old":null,"new":"7.5"},{"seq":195684,"id":"CVE-2026-87601","ts":1789380578395,"field":"severity","old":"none","new":"high"},{"seq":194636,"id":"CVE-2026-87601","ts":1789378789633,"field":"cvss","old":"7.5","new":null},{"seq":194635,"id":"CVE-2026-87601","ts":1789378789633,"field":"severity","old":"high","new":"none"},{"seq":193423,"id":"CVE-2026-87601","ts":1789376521071,"field":"cvss","old":null,"new":"7.5"},{"seq":193422,"id":"CVE-2026-87601","ts":1789376521071,"field":"severity","old":"none","new":"high"},{"seq":192210,"id":"CVE-2026-87601","ts":1789373639444,"field":"cvss","old":"7.5","new":null},{"seq":192209,"id":"CVE-2026-87601","ts":1789373639444,"field":"severity","old":"high","new":"none"},{"seq":190995,"id":"CVE-2026-87601","ts":1789369488053,"field":"cvss","old":null,"new":"7.5"},{"seq":190994,"id":"CVE-2026-87601","ts":1789369488053,"field":"severity","old":"none","new":"high"},{"seq":189782,"id":"CVE-2026-87601","ts":1789368461016,"field":"cvss","old":"7.5","new":null},{"seq":189781,"id":"CVE-2026-87601","ts":1789368461016,"field":"severity","old":"high","new":"none"},{"seq":188565,"id":"CVE-2026-87601","ts":1789365236975,"field":"cvss","old":null,"new":"7.5"},{"seq":188564,"id":"CVE-2026-87601","ts":1789365236975,"field":"severity","old":"none","new":"high"},{"seq":187352,"id":"CVE-2026-87601","ts":1789363480356,"field":"cvss","old":"7.5","new":null},{"seq":187351,"id":"CVE-2026-87601","ts":1789363480356,"field":"severity","old":"high","new":"none"},{"seq":186138,"id":"CVE-2026-87601","ts":1789361235650,"field":"cvss","old":null,"new":"7.5"},{"seq":186137,"id":"CVE-2026-87601","ts":1789361235650,"field":"severity","old":"none","new":"high"},{"seq":184925,"id":"CVE-2026-87601","ts":1789358378375,"field":"cvss","old":"7.5","new":null},{"seq":184924,"id":"CVE-2026-87601","ts":1789358378375,"field":"severity","old":"high","new":"none"},{"seq":183174,"id":"CVE-2026-87601","ts":1789354323515,"field":"cvss","old":null,"new":"7.5"},{"seq":183173,"id":"CVE-2026-87601","ts":1789354323515,"field":"severity","old":"none","new":"high"},{"seq":181967,"id":"CVE-2026-87601","ts":1789353335328,"field":"cvss","old":"7.5","new":null},{"seq":181966,"id":"CVE-2026-87601","ts":1789353335328,"field":"severity","old":"high","new":"none"},{"seq":180760,"id":"CVE-2026-87601","ts":1789350290973,"field":"cvss","old":null,"new":"7.5"},{"seq":180759,"id":"CVE-2026-87601","ts":1789350290973,"field":"severity","old":"none","new":"high"},{"seq":179553,"id":"CVE-2026-87601","ts":1789348308656,"field":"cvss","old":"7.5","new":null},{"seq":179552,"id":"CVE-2026-87601","ts":1789348308656,"field":"severity","old":"high","new":"none"},{"seq":178346,"id":"CVE-2026-87601","ts":1789346377977,"field":"cvss","old":null,"new":"7.5"},{"seq":178345,"id":"CVE-2026-87601","ts":1789346377977,"field":"severity","old":"none","new":"high"},{"seq":177139,"id":"CVE-2026-87601","ts":1789343188622,"field":"cvss","old":"7.5","new":null},{"seq":177138,"id":"CVE-2026-87601","ts":1789343188622,"field":"severity","old":"high","new":"none"},{"seq":175256,"id":"CVE-2026-87601","ts":1789334884654,"field":"cvss","old":null,"new":"7.5"},{"seq":175255,"id":"CVE-2026-87601","ts":1789334884654,"field":"severity","old":"none","new":"high"},{"seq":174051,"id":"CVE-2026-87601","ts":1789333703750,"field":"cvss","old":"7.5","new":null},{"seq":174050,"id":"CVE-2026-87601","ts":1789333703750,"field":"severity","old":"high","new":"none"},{"seq":172865,"id":"CVE-2026-87601","ts":1789331096977,"field":"cvss","old":null,"new":"7.5"},{"seq":172864,"id":"CVE-2026-87601","ts":1789331096977,"field":"severity","old":"none","new":"high"}]}