PT-2026-88701

CVE-2026-87601

Published

2026-08-01

Updated

2026-09-16

Description by

CVSS 2.0

7.6

High

MetricsAV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36

Description A race condition in V8, the open-source JavaScript and WebAssembly engine, allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to open a specially crafted HTML page. A race condition occurs when the timing or sequence of events is not properly controlled, leading to unexpected behavior.

Recommendations Update Google Chrome to version 153.0.8010.36 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\'Race Condition\')

Related identifiers

CVE-2026-87601

BDU:2026-17073

AZL-100002