PT-2026-88658
CVE-2026-87558
·
Published
2026-09-09
·
Updated
2026-10-28
Description by
CVSS 3.1
9.6
CriticalMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 153.0.8010.36
Description
A use after free issue exists in the Payments component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker can exploit this by inducing a user to open a crafted HTML page, potentially allowing the execution of arbitrary code outside the sandbox.
Recommendations
Update Google Chrome to version 153.0.8010.36 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾