Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
-
Google has rolled out an update for Chrome that addresses 230 security vulnerabilities, one of which is a zero-day that has already been exploited in the wild.
The flaw is tracked as CVE-2026-87491 and is rated medium severity with no CVSS score provided. It is an out-of-bounds write in V8, Chrome's JavaScript and WebAssembly engine. Successful exploitation allows code execution inside the browser sandbox, which is why the vulnerability is considered serious despite its medium rating.
Affected versions and mitigation guidance:
- Google Chrome versions prior to the fixed release are impacted.
- Users should update Chrome to the latest version immediately via the browser's built-in updater.
- Given active exploitation, patching should be treated as urgent rather than routine.
The update covers a wide range of other fixes beyond this single zero-day, so applying it resolves the immediate threat along with the rest of the patched issues.
Source: The Hacker News
Has your organization pushed this Chrome update yet, or are you holding it back for internal testing?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login