{"id":"CVE-2026-87628","title":"Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic","summary":"Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)","severity":"high","cvss":8.3,"cvssVector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-10","sourceUpdated":"2026-09-10T04:18:29.850","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87628","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/553770012","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T14:25:56.570271Z"},"epss":0.00168,"epssPercentile":0.06576,"ingestedAt":"2026-09-09T01:17:17.513Z","slug":"CVE-2026-87628","body":"## Overview\n\nUse after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":45.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202567,"id":"CVE-2026-87628","ts":1789400086015,"field":"cvss","old":null,"new":"8.3"},{"seq":202566,"id":"CVE-2026-87628","ts":1789400086015,"field":"severity","old":"none","new":"high"},{"seq":201294,"id":"CVE-2026-87628","ts":1789397620616,"field":"cvss","old":"8.3","new":null},{"seq":201293,"id":"CVE-2026-87628","ts":1789397620616,"field":"severity","old":"high","new":"none"},{"seq":199987,"id":"CVE-2026-87628","ts":1789395578554,"field":"cvss","old":null,"new":"8.3"},{"seq":199986,"id":"CVE-2026-87628","ts":1789395578554,"field":"severity","old":"none","new":"high"},{"seq":199224,"id":"CVE-2026-87628","ts":1789392260672,"field":"cvss","old":"8.3","new":null},{"seq":199223,"id":"CVE-2026-87628","ts":1789392260672,"field":"severity","old":"high","new":"none"},{"seq":197557,"id":"CVE-2026-87628","ts":1789384297178,"field":"cvss","old":null,"new":"8.3"},{"seq":197556,"id":"CVE-2026-87628","ts":1789384297178,"field":"severity","old":"none","new":"high"},{"seq":196831,"id":"CVE-2026-87628","ts":1789383779918,"field":"cvss","old":"8.3","new":null},{"seq":196830,"id":"CVE-2026-87628","ts":1789383779918,"field":"severity","old":"high","new":"none"},{"seq":195735,"id":"CVE-2026-87628","ts":1789380578577,"field":"cvss","old":null,"new":"8.3"},{"seq":195734,"id":"CVE-2026-87628","ts":1789380578577,"field":"severity","old":"none","new":"high"},{"seq":194686,"id":"CVE-2026-87628","ts":1789378789827,"field":"cvss","old":"8.3","new":null},{"seq":194685,"id":"CVE-2026-87628","ts":1789378789827,"field":"severity","old":"high","new":"none"},{"seq":193473,"id":"CVE-2026-87628","ts":1789376521263,"field":"cvss","old":null,"new":"8.3"},{"seq":193472,"id":"CVE-2026-87628","ts":1789376521263,"field":"severity","old":"none","new":"high"},{"seq":192260,"id":"CVE-2026-87628","ts":1789373639638,"field":"cvss","old":"8.3","new":null},{"seq":192259,"id":"CVE-2026-87628","ts":1789373639638,"field":"severity","old":"high","new":"none"},{"seq":191045,"id":"CVE-2026-87628","ts":1789369489037,"field":"cvss","old":null,"new":"8.3"},{"seq":191044,"id":"CVE-2026-87628","ts":1789369489037,"field":"severity","old":"none","new":"high"},{"seq":189832,"id":"CVE-2026-87628","ts":1789368461202,"field":"cvss","old":"8.3","new":null},{"seq":189831,"id":"CVE-2026-87628","ts":1789368461202,"field":"severity","old":"high","new":"none"},{"seq":188615,"id":"CVE-2026-87628","ts":1789365237157,"field":"cvss","old":null,"new":"8.3"},{"seq":188614,"id":"CVE-2026-87628","ts":1789365237157,"field":"severity","old":"none","new":"high"},{"seq":187402,"id":"CVE-2026-87628","ts":1789363480545,"field":"cvss","old":"8.3","new":null},{"seq":187401,"id":"CVE-2026-87628","ts":1789363480545,"field":"severity","old":"high","new":"none"},{"seq":186188,"id":"CVE-2026-87628","ts":1789361235834,"field":"cvss","old":null,"new":"8.3"},{"seq":186187,"id":"CVE-2026-87628","ts":1789361235834,"field":"severity","old":"none","new":"high"},{"seq":184975,"id":"CVE-2026-87628","ts":1789358381989,"field":"cvss","old":"8.3","new":null},{"seq":184974,"id":"CVE-2026-87628","ts":1789358381989,"field":"severity","old":"high","new":"none"},{"seq":183224,"id":"CVE-2026-87628","ts":1789354323727,"field":"cvss","old":null,"new":"8.3"},{"seq":183223,"id":"CVE-2026-87628","ts":1789354323727,"field":"severity","old":"none","new":"high"},{"seq":182017,"id":"CVE-2026-87628","ts":1789353335515,"field":"cvss","old":"8.3","new":null},{"seq":182016,"id":"CVE-2026-87628","ts":1789353335515,"field":"severity","old":"high","new":"none"},{"seq":180810,"id":"CVE-2026-87628","ts":1789350291158,"field":"cvss","old":null,"new":"8.3"},{"seq":180809,"id":"CVE-2026-87628","ts":1789350291158,"field":"severity","old":"none","new":"high"},{"seq":179603,"id":"CVE-2026-87628","ts":1789348308846,"field":"cvss","old":"8.3","new":null},{"seq":179602,"id":"CVE-2026-87628","ts":1789348308846,"field":"severity","old":"high","new":"none"},{"seq":178396,"id":"CVE-2026-87628","ts":1789346378163,"field":"cvss","old":null,"new":"8.3"},{"seq":178395,"id":"CVE-2026-87628","ts":1789346378163,"field":"severity","old":"none","new":"high"},{"seq":177189,"id":"CVE-2026-87628","ts":1789343188813,"field":"cvss","old":"8.3","new":null},{"seq":177188,"id":"CVE-2026-87628","ts":1789343188813,"field":"severity","old":"high","new":"none"},{"seq":175306,"id":"CVE-2026-87628","ts":1789334884864,"field":"cvss","old":null,"new":"8.3"},{"seq":175305,"id":"CVE-2026-87628","ts":1789334884864,"field":"severity","old":"none","new":"high"},{"seq":174101,"id":"CVE-2026-87628","ts":1789333703932,"field":"cvss","old":"8.3","new":null},{"seq":174100,"id":"CVE-2026-87628","ts":1789333703932,"field":"severity","old":"high","new":"none"},{"seq":172915,"id":"CVE-2026-87628","ts":1789331097164,"field":"cvss","old":null,"new":"8.3"},{"seq":172914,"id":"CVE-2026-87628","ts":1789331097164,"field":"severity","old":"none","new":"high"}]}