CVE-2026-87491

LLM-synthesized narrative grounded in this CVE's description and references.

• Google/Chrome2 versions

  cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <153.0.8010.36
  • (no CPE)range: <153.0.8010.36
• Chromium/Chromiumllm-fuzzy

  Range: <153.0.8010.36
• osv-coords2 versions

  pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweed

  < 153.0.8010.36-bp160.1.1+ 1 more

  • (no CPE)range: < 153.0.8010.36-bp160.1.1
  • (no CPE)range: < 153.0.8010.36-1.1

• chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.htmlnvdRelease NotesVendor Advisory
• issues.chromium.org/issues/543557673nvdPermissions Required
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• Mind the (Patch) Gap , Part 3: Analysis with Volexity Volcano, Threat Intel, and MCP
  Volexity · Oct 16, 2026
• Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
  The Hacker News · Sep 23, 2026
• Volexity spots another China-aligned threat group exploiting Chrome and Microsoft defects
  CyberScoop · Sep 22, 2026
• Hackers Clone Legitimate Websites to Silently Trigger Chrome and Windows Zero-Day Exploits
  Cyber Security News · Sep 22, 2026
• Mind the (Patch) Gap, Part 2: Fake Websites Used to Deploy Chrome & Windows 0-Day Exploits
  Volexity · Sep 21, 2026
• Google Pixel phones pwned in zero-click attacks
  The Register Security · Sep 16, 2026
• China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE
  The Hacker News · Sep 15, 2026
• ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits
  The Hacker News · Sep 14, 2026
• Weekly Cybersecurity Newsletter Bulletin – Microsoft 0-day, FortiOS, PAN-OS Flaw, Revolut Data Breach, and 20+ Stories
  Cyber Security News · Sep 14, 2026
• Week in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploited
  Help Net Security · Sep 13, 2026
• BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days
  SecurityWeek · Sep 12, 2026
• Update Chrome now to protect against an actively exploited vulnerability
  Malwarebytes Labs · Sep 10, 2026
• Chinese espionage groups swarm to exploit triple-link chain of zero-days
  CyberScoop · Sep 9, 2026
• Mind the (Patch) Gap: Multiple Chinese Threat Actors Chain 0-day Exploits in Chrome & Windows
  Volexity · Sep 9, 2026
• Chrome 153 Patches Seventh Zero-Day of 2026
  SecurityWeek · Sep 9, 2026
• Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
  The Hacker News · Sep 9, 2026
• Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)
  Help Net Security · Sep 9, 2026
• Chrome 153 Fixes 230 Vulnerabilities, Including One 0-Day Exploited in the Wild
  Cyber Security News · Sep 9, 2026
• Google: Critical Flaw Added to CISA KEV Under Active Exploitation
  Vypr Intelligence · Sep 9, 2026
• CISA Adds Four Known Exploited Vulnerabilities to Catalog
  CISA Alerts