{"id":"CVE-2026-87647","title":"Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page","summary":"Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)","severity":"low","cvss":3.4,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","cwe":["CWE-908"],"vendor":"google","product":"chrome","affected":["chrome < 153.0.8010.36"],"patched":["chrome 153.0.8010.36"],"published":"2026-09-09","updated":"2026-09-09","sourceUpdated":"2026-09-09T20:28:46.967","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87647","references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/536673946","label":"chrome-cve-admin@google.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87647.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-87647"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87647"}],"tags":["nvd","cve.org","csaf","vex","red-hat","score-dispute"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T20:02:21.987615Z"},"epss":0.00185,"epssPercentile":0.08312,"scores":{"nvd":3.4,"vendor":7.4,"adp":3.4},"ingestedAt":"2026-09-09T01:17:17.512Z","slug":"CVE-2026-87647","body":"## Overview\n\nUninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)\n\n## Affected\n\n- `chrome < 153.0.8010.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 153.0.8010.36`\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87647.json)","depth":"sunlit","depthScore":19,"depthScoreParts":{"impact":18.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202605,"id":"CVE-2026-87647","ts":1789400086200,"field":"cvss","old":null,"new":"3.4"},{"seq":202604,"id":"CVE-2026-87647","ts":1789400086200,"field":"severity","old":"none","new":"low"},{"seq":201332,"id":"CVE-2026-87647","ts":1789397620761,"field":"cvss","old":"3.4","new":null},{"seq":201331,"id":"CVE-2026-87647","ts":1789397620761,"field":"severity","old":"low","new":"none"},{"seq":200025,"id":"CVE-2026-87647","ts":1789395578694,"field":"cvss","old":null,"new":"3.4"},{"seq":200024,"id":"CVE-2026-87647","ts":1789395578694,"field":"severity","old":"none","new":"low"},{"seq":199262,"id":"CVE-2026-87647","ts":1789392260816,"field":"cvss","old":"3.4","new":null},{"seq":199261,"id":"CVE-2026-87647","ts":1789392260816,"field":"severity","old":"low","new":"none"},{"seq":197595,"id":"CVE-2026-87647","ts":1789384297309,"field":"cvss","old":null,"new":"3.4"},{"seq":197594,"id":"CVE-2026-87647","ts":1789384297309,"field":"severity","old":"none","new":"low"},{"seq":196869,"id":"CVE-2026-87647","ts":1789383782716,"field":"cvss","old":"3.4","new":null},{"seq":196868,"id":"CVE-2026-87647","ts":1789383782716,"field":"severity","old":"low","new":"none"},{"seq":195773,"id":"CVE-2026-87647","ts":1789380578710,"field":"cvss","old":null,"new":"3.4"},{"seq":195772,"id":"CVE-2026-87647","ts":1789380578710,"field":"severity","old":"none","new":"low"},{"seq":194724,"id":"CVE-2026-87647","ts":1789378789965,"field":"cvss","old":"3.4","new":null},{"seq":194723,"id":"CVE-2026-87647","ts":1789378789965,"field":"severity","old":"low","new":"none"},{"seq":193511,"id":"CVE-2026-87647","ts":1789376521571,"field":"cvss","old":null,"new":"3.4"},{"seq":193510,"id":"CVE-2026-87647","ts":1789376521571,"field":"severity","old":"none","new":"low"},{"seq":192298,"id":"CVE-2026-87647","ts":1789373639777,"field":"cvss","old":"3.4","new":null},{"seq":192297,"id":"CVE-2026-87647","ts":1789373639777,"field":"severity","old":"low","new":"none"},{"seq":191083,"id":"CVE-2026-87647","ts":1789369489202,"field":"cvss","old":null,"new":"3.4"},{"seq":191082,"id":"CVE-2026-87647","ts":1789369489202,"field":"severity","old":"none","new":"low"},{"seq":189870,"id":"CVE-2026-87647","ts":1789368461341,"field":"cvss","old":"3.4","new":null},{"seq":189869,"id":"CVE-2026-87647","ts":1789368461341,"field":"severity","old":"low","new":"none"},{"seq":188653,"id":"CVE-2026-87647","ts":1789365237294,"field":"cvss","old":null,"new":"3.4"},{"seq":188652,"id":"CVE-2026-87647","ts":1789365237294,"field":"severity","old":"none","new":"low"},{"seq":187440,"id":"CVE-2026-87647","ts":1789363480684,"field":"cvss","old":"3.4","new":null},{"seq":187439,"id":"CVE-2026-87647","ts":1789363480684,"field":"severity","old":"low","new":"none"},{"seq":186226,"id":"CVE-2026-87647","ts":1789361235971,"field":"cvss","old":null,"new":"3.4"},{"seq":186225,"id":"CVE-2026-87647","ts":1789361235971,"field":"severity","old":"none","new":"low"},{"seq":185013,"id":"CVE-2026-87647","ts":1789358384773,"field":"cvss","old":"3.4","new":null},{"seq":185012,"id":"CVE-2026-87647","ts":1789358384773,"field":"severity","old":"low","new":"none"},{"seq":183262,"id":"CVE-2026-87647","ts":1789354323886,"field":"cvss","old":null,"new":"3.4"},{"seq":183261,"id":"CVE-2026-87647","ts":1789354323886,"field":"severity","old":"none","new":"low"},{"seq":182055,"id":"CVE-2026-87647","ts":1789353335668,"field":"cvss","old":"3.4","new":null},{"seq":182054,"id":"CVE-2026-87647","ts":1789353335668,"field":"severity","old":"low","new":"none"},{"seq":180848,"id":"CVE-2026-87647","ts":1789350291293,"field":"cvss","old":null,"new":"3.4"},{"seq":180847,"id":"CVE-2026-87647","ts":1789350291293,"field":"severity","old":"none","new":"low"},{"seq":179641,"id":"CVE-2026-87647","ts":1789348308994,"field":"cvss","old":"3.4","new":null},{"seq":179640,"id":"CVE-2026-87647","ts":1789348308994,"field":"severity","old":"low","new":"none"},{"seq":178434,"id":"CVE-2026-87647","ts":1789346378298,"field":"cvss","old":null,"new":"3.4"},{"seq":178433,"id":"CVE-2026-87647","ts":1789346378298,"field":"severity","old":"none","new":"low"},{"seq":177227,"id":"CVE-2026-87647","ts":1789343188957,"field":"cvss","old":"3.4","new":null},{"seq":177226,"id":"CVE-2026-87647","ts":1789343188957,"field":"severity","old":"low","new":"none"},{"seq":175344,"id":"CVE-2026-87647","ts":1789334885021,"field":"cvss","old":null,"new":"3.4"},{"seq":175343,"id":"CVE-2026-87647","ts":1789334885021,"field":"severity","old":"none","new":"low"},{"seq":174139,"id":"CVE-2026-87647","ts":1789333704073,"field":"cvss","old":"3.4","new":null},{"seq":174138,"id":"CVE-2026-87647","ts":1789333704073,"field":"severity","old":"low","new":"none"},{"seq":172953,"id":"CVE-2026-87647","ts":1789331097299,"field":"cvss","old":null,"new":"3.4"},{"seq":172952,"id":"CVE-2026-87647","ts":1789331097299,"field":"severity","old":"none","new":"low"}]}