{"id":"CVE-2026-87616","title":"Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the …","summary":"Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the …","severity":"high","cvss":8.3,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-665"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T04:18:28.960","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87616","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/520469117","label":"chrome-cve-admin@google.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87616.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-87616"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87616"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87616"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T14:12:15.810691Z"},"epss":0.00388,"epssPercentile":0.3279,"scores":{"nvd":8.3,"vendor":9,"adp":8.3},"ingestedAt":"2026-09-09T01:17:17.508Z","slug":"CVE-2026-87616","body":"## Overview\n\nImproper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87616.json)","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":45.7,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":202543,"id":"CVE-2026-87616","ts":1789400085897,"field":"cvss","old":null,"new":"8.3"},{"seq":202542,"id":"CVE-2026-87616","ts":1789400085897,"field":"severity","old":"none","new":"high"},{"seq":201270,"id":"CVE-2026-87616","ts":1789397620532,"field":"cvss","old":"8.3","new":null},{"seq":201269,"id":"CVE-2026-87616","ts":1789397620532,"field":"severity","old":"high","new":"none"},{"seq":199963,"id":"CVE-2026-87616","ts":1789395578469,"field":"cvss","old":null,"new":"8.3"},{"seq":199962,"id":"CVE-2026-87616","ts":1789395578469,"field":"severity","old":"none","new":"high"},{"seq":199202,"id":"CVE-2026-87616","ts":1789392260587,"field":"cvss","old":"8.3","new":null},{"seq":199201,"id":"CVE-2026-87616","ts":1789392260587,"field":"severity","old":"high","new":"none"},{"seq":197535,"id":"CVE-2026-87616","ts":1789384297103,"field":"cvss","old":null,"new":"8.3"},{"seq":197534,"id":"CVE-2026-87616","ts":1789384297103,"field":"severity","old":"none","new":"high"},{"seq":196809,"id":"CVE-2026-87616","ts":1789383778347,"field":"cvss","old":"8.3","new":null},{"seq":196808,"id":"CVE-2026-87616","ts":1789383778347,"field":"severity","old":"high","new":"none"},{"seq":195713,"id":"CVE-2026-87616","ts":1789380578496,"field":"cvss","old":null,"new":"8.3"},{"seq":195712,"id":"CVE-2026-87616","ts":1789380578496,"field":"severity","old":"none","new":"high"},{"seq":194664,"id":"CVE-2026-87616","ts":1789378789737,"field":"cvss","old":"8.3","new":null},{"seq":194663,"id":"CVE-2026-87616","ts":1789378789737,"field":"severity","old":"high","new":"none"},{"seq":193451,"id":"CVE-2026-87616","ts":1789376521180,"field":"cvss","old":null,"new":"8.3"},{"seq":193450,"id":"CVE-2026-87616","ts":1789376521180,"field":"severity","old":"none","new":"high"},{"seq":192238,"id":"CVE-2026-87616","ts":1789373639555,"field":"cvss","old":"8.3","new":null},{"seq":192237,"id":"CVE-2026-87616","ts":1789373639555,"field":"severity","old":"high","new":"none"},{"seq":191023,"id":"CVE-2026-87616","ts":1789369488941,"field":"cvss","old":null,"new":"8.3"},{"seq":191022,"id":"CVE-2026-87616","ts":1789369488941,"field":"severity","old":"none","new":"high"},{"seq":189810,"id":"CVE-2026-87616","ts":1789368461120,"field":"cvss","old":"8.3","new":null},{"seq":189809,"id":"CVE-2026-87616","ts":1789368461120,"field":"severity","old":"high","new":"none"},{"seq":188593,"id":"CVE-2026-87616","ts":1789365237077,"field":"cvss","old":null,"new":"8.3"},{"seq":188592,"id":"CVE-2026-87616","ts":1789365237077,"field":"severity","old":"none","new":"high"},{"seq":187380,"id":"CVE-2026-87616","ts":1789363480463,"field":"cvss","old":"8.3","new":null},{"seq":187379,"id":"CVE-2026-87616","ts":1789363480463,"field":"severity","old":"high","new":"none"},{"seq":186166,"id":"CVE-2026-87616","ts":1789361235753,"field":"cvss","old":null,"new":"8.3"},{"seq":186165,"id":"CVE-2026-87616","ts":1789361235753,"field":"severity","old":"none","new":"high"},{"seq":184953,"id":"CVE-2026-87616","ts":1789358380305,"field":"cvss","old":"8.3","new":null},{"seq":184952,"id":"CVE-2026-87616","ts":1789358380305,"field":"severity","old":"high","new":"none"},{"seq":183202,"id":"CVE-2026-87616","ts":1789354323633,"field":"cvss","old":null,"new":"8.3"},{"seq":183201,"id":"CVE-2026-87616","ts":1789354323633,"field":"severity","old":"none","new":"high"},{"seq":181995,"id":"CVE-2026-87616","ts":1789353335432,"field":"cvss","old":"8.3","new":null},{"seq":181994,"id":"CVE-2026-87616","ts":1789353335432,"field":"severity","old":"high","new":"none"},{"seq":180788,"id":"CVE-2026-87616","ts":1789350291076,"field":"cvss","old":null,"new":"8.3"},{"seq":180787,"id":"CVE-2026-87616","ts":1789350291076,"field":"severity","old":"none","new":"high"},{"seq":179581,"id":"CVE-2026-87616","ts":1789348308763,"field":"cvss","old":"8.3","new":null},{"seq":179580,"id":"CVE-2026-87616","ts":1789348308763,"field":"severity","old":"high","new":"none"},{"seq":178374,"id":"CVE-2026-87616","ts":1789346378081,"field":"cvss","old":null,"new":"8.3"},{"seq":178373,"id":"CVE-2026-87616","ts":1789346378081,"field":"severity","old":"none","new":"high"},{"seq":177167,"id":"CVE-2026-87616","ts":1789343188729,"field":"cvss","old":"8.3","new":null},{"seq":177166,"id":"CVE-2026-87616","ts":1789343188729,"field":"severity","old":"high","new":"none"},{"seq":175284,"id":"CVE-2026-87616","ts":1789334884769,"field":"cvss","old":null,"new":"8.3"},{"seq":175283,"id":"CVE-2026-87616","ts":1789334884769,"field":"severity","old":"none","new":"high"},{"seq":174079,"id":"CVE-2026-87616","ts":1789333703851,"field":"cvss","old":"8.3","new":null},{"seq":174078,"id":"CVE-2026-87616","ts":1789333703851,"field":"severity","old":"high","new":"none"},{"seq":172893,"id":"CVE-2026-87616","ts":1789331097080,"field":"cvss","old":null,"new":"8.3"},{"seq":172892,"id":"CVE-2026-87616","ts":1789331097080,"field":"severity","old":"none","new":"high"}]}