{"id":"CVE-2026-87617","title":"Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page","summary":"Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T04:18:29.133","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87617","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/523442920","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T12:53:24.206994Z"},"epss":0.00364,"epssPercentile":0.30232,"ingestedAt":"2026-09-09T01:17:17.506Z","slug":"CVE-2026-87617","body":"## Overview\n\nUse after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":202545,"id":"CVE-2026-87617","ts":1789400085906,"field":"cvss","old":null,"new":"8.8"},{"seq":202544,"id":"CVE-2026-87617","ts":1789400085906,"field":"severity","old":"none","new":"high"},{"seq":201272,"id":"CVE-2026-87617","ts":1789397620539,"field":"cvss","old":"8.8","new":null},{"seq":201271,"id":"CVE-2026-87617","ts":1789397620539,"field":"severity","old":"high","new":"none"},{"seq":199965,"id":"CVE-2026-87617","ts":1789395578476,"field":"cvss","old":null,"new":"8.8"},{"seq":199964,"id":"CVE-2026-87617","ts":1789395578476,"field":"severity","old":"none","new":"high"},{"seq":199204,"id":"CVE-2026-87617","ts":1789392260594,"field":"cvss","old":"8.8","new":null},{"seq":199203,"id":"CVE-2026-87617","ts":1789392260594,"field":"severity","old":"high","new":"none"},{"seq":197537,"id":"CVE-2026-87617","ts":1789384297109,"field":"cvss","old":null,"new":"8.8"},{"seq":197536,"id":"CVE-2026-87617","ts":1789384297109,"field":"severity","old":"none","new":"high"},{"seq":196811,"id":"CVE-2026-87617","ts":1789383778477,"field":"cvss","old":"8.8","new":null},{"seq":196810,"id":"CVE-2026-87617","ts":1789383778477,"field":"severity","old":"high","new":"none"},{"seq":195715,"id":"CVE-2026-87617","ts":1789380578503,"field":"cvss","old":null,"new":"8.8"},{"seq":195714,"id":"CVE-2026-87617","ts":1789380578503,"field":"severity","old":"none","new":"high"},{"seq":194666,"id":"CVE-2026-87617","ts":1789378789745,"field":"cvss","old":"8.8","new":null},{"seq":194665,"id":"CVE-2026-87617","ts":1789378789745,"field":"severity","old":"high","new":"none"},{"seq":193453,"id":"CVE-2026-87617","ts":1789376521187,"field":"cvss","old":null,"new":"8.8"},{"seq":193452,"id":"CVE-2026-87617","ts":1789376521187,"field":"severity","old":"none","new":"high"},{"seq":192240,"id":"CVE-2026-87617","ts":1789373639562,"field":"cvss","old":"8.8","new":null},{"seq":192239,"id":"CVE-2026-87617","ts":1789373639562,"field":"severity","old":"high","new":"none"},{"seq":191025,"id":"CVE-2026-87617","ts":1789369488948,"field":"cvss","old":null,"new":"8.8"},{"seq":191024,"id":"CVE-2026-87617","ts":1789369488948,"field":"severity","old":"none","new":"high"},{"seq":189812,"id":"CVE-2026-87617","ts":1789368461127,"field":"cvss","old":"8.8","new":null},{"seq":189811,"id":"CVE-2026-87617","ts":1789368461127,"field":"severity","old":"high","new":"none"},{"seq":188595,"id":"CVE-2026-87617","ts":1789365237084,"field":"cvss","old":null,"new":"8.8"},{"seq":188594,"id":"CVE-2026-87617","ts":1789365237084,"field":"severity","old":"none","new":"high"},{"seq":187382,"id":"CVE-2026-87617","ts":1789363480470,"field":"cvss","old":"8.8","new":null},{"seq":187381,"id":"CVE-2026-87617","ts":1789363480470,"field":"severity","old":"high","new":"none"},{"seq":186168,"id":"CVE-2026-87617","ts":1789361235760,"field":"cvss","old":null,"new":"8.8"},{"seq":186167,"id":"CVE-2026-87617","ts":1789361235760,"field":"severity","old":"none","new":"high"},{"seq":184955,"id":"CVE-2026-87617","ts":1789358380445,"field":"cvss","old":"8.8","new":null},{"seq":184954,"id":"CVE-2026-87617","ts":1789358380445,"field":"severity","old":"high","new":"none"},{"seq":183204,"id":"CVE-2026-87617","ts":1789354323640,"field":"cvss","old":null,"new":"8.8"},{"seq":183203,"id":"CVE-2026-87617","ts":1789354323640,"field":"severity","old":"none","new":"high"},{"seq":181997,"id":"CVE-2026-87617","ts":1789353335439,"field":"cvss","old":"8.8","new":null},{"seq":181996,"id":"CVE-2026-87617","ts":1789353335439,"field":"severity","old":"high","new":"none"},{"seq":180790,"id":"CVE-2026-87617","ts":1789350291083,"field":"cvss","old":null,"new":"8.8"},{"seq":180789,"id":"CVE-2026-87617","ts":1789350291083,"field":"severity","old":"none","new":"high"},{"seq":179583,"id":"CVE-2026-87617","ts":1789348308770,"field":"cvss","old":"8.8","new":null},{"seq":179582,"id":"CVE-2026-87617","ts":1789348308770,"field":"severity","old":"high","new":"none"},{"seq":178376,"id":"CVE-2026-87617","ts":1789346378088,"field":"cvss","old":null,"new":"8.8"},{"seq":178375,"id":"CVE-2026-87617","ts":1789346378088,"field":"severity","old":"none","new":"high"},{"seq":177169,"id":"CVE-2026-87617","ts":1789343188736,"field":"cvss","old":"8.8","new":null},{"seq":177168,"id":"CVE-2026-87617","ts":1789343188736,"field":"severity","old":"high","new":"none"},{"seq":175286,"id":"CVE-2026-87617","ts":1789334884777,"field":"cvss","old":null,"new":"8.8"},{"seq":175285,"id":"CVE-2026-87617","ts":1789334884777,"field":"severity","old":"none","new":"high"},{"seq":174081,"id":"CVE-2026-87617","ts":1789333703858,"field":"cvss","old":"8.8","new":null},{"seq":174080,"id":"CVE-2026-87617","ts":1789333703858,"field":"severity","old":"high","new":"none"},{"seq":172895,"id":"CVE-2026-87617","ts":1789331097087,"field":"cvss","old":null,"new":"8.8"},{"seq":172894,"id":"CVE-2026-87617","ts":1789331097087,"field":"severity","old":"none","new":"high"}]}