CVE-2026-87601

Опубликовано: 09 сент. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Ссылки

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html
Release Notes
Vendor Advisory
https://issues.chromium.org/issues/541604100
Permissions Required

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 153.0.8010.36 (исключая)

EPSS

Процентиль: 8%

0.00182

Низкий

7.5 High

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVE-2026-87601

CVSS3: 7.5

ubuntu

10 дней назад

Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-87601

msrc

8 дней назад

Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-87601

CVSS3: 7.5

debian

10 дней назад

Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a ...

GHSA-g985-w23h-4wjj

CVSS3: 7.5

github

10 дней назад

Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

EPSS

Процентиль: 8%

0.00182

Низкий

7.5 High

CVSS3

Дефекты

CWE-362