PT-2026-88707

CVE-2026-87607

·

Published

2026-09-09

·

Updated

2026-10-28

Description by

CVSS 3.1
9.6
Critical
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36
Description A use after free issue exists in the Device component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker can exploit this by inducing a user to open a crafted HTML page, potentially allowing the execution of arbitrary code outside the sandbox.
Recommendations Update Google Chrome to version 153.0.8010.36 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ECHO-1055-88C5-48E9
OPENSUSE-SU-2026:11750-1
OPENSUSE-SU-2026:21858-1
OPENSUSE-SU-2026:21921-1
Found an issue in the description? Have something to add? Feel free to write us 👾