<![CDATA[Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox]]>Google has rolled out an update for Chrome that addresses 230 security vulnerabilities, one of which is a zero-day that has already been exploited in the wild.

The flaw is tracked as CVE-2026-87491 and is rated medium severity with no CVSS score provided. It is an out-of-bounds write in V8, Chrome's JavaScript and WebAssembly engine. Successful exploitation allows code execution inside the browser sandbox, which is why the vulnerability is considered serious despite its medium rating.

Affected versions and mitigation guidance:

  • Google Chrome versions prior to the fixed release are impacted.
  • Users should update Chrome to the latest version immediately via the browser's built-in updater.
  • Given active exploitation, patching should be treated as urgent rather than routine.

The update covers a wide range of other fixes beyond this single zero-day, so applying it resolves the immediate threat along with the rest of the patched issues.

Source: The Hacker News

Has your organization pushed this Chrome update yet, or are you holding it back for internal testing?

]]>https://xploitlk.com/topic/325/chrome-v8-zero-day-exploited-in-the-wild-enables-code-execution-inside-sandboxRSS for NodeTue, 27 Oct 2026 11:47:17 GMTSun, 13 Sep 2026 20:30:22 GMT60