highclosedpatched
Chrome zero-day CVE-2026-87491 (V8 OOB write)
› Google Chrome / Chromium V8
Get an email when a new major security incident drops. No spam, unsubscribe any time.
- started
- Sep 9, 2026
- closed
- Sep 9, 2026
- CVEs
- 1
- sources
- 2
## summary
September 9 2026 Chrome 153 patched CVE-2026-87491, a V8 out-of-bounds write Google said was exploited in the wild — the seventh Chrome zero-day of 2026. Fixed in 153.0.8010.36/.37. CISA KEV listed.
severity: Exploited in the wild / CISA KEV
## cve ids[1]
## affected
- Before 153.0.8010.36/.37
## fixed in
- 153.0.8010.36+
- 153.0.8010.37+
## news & write-ups[2]
## notes & caveats
Verify primary vendor advisory for exact fixed versions; facts taken from public sources listed in links.
