PT-2026-88647

CVE-2026-87547

Published

2026-03-28

Updated

2026-09-16

Description by

CVSS 2.0

Critical

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36

Description Incorrect reference resolution in the FileSystem component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering to entice a user to visit a crafted HTML page.

Recommendations Update Google Chrome to version 153.0.8010.36 or later.

Exploitability

Fix

Vendors

Affected products

Weakness enumeration

CWE-706: Use of Incorrectly-Resolved Name or Reference

Related identifiers

CVE-2026-87547

BDU:2026-17584

ECHO-1EF6-CA52-A9F9

OPENSUSE-SU-2026:11750-1