CVE-2026-87529

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Scoring

Severity

CRITICAL

CVSS base score

9.6

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE

CWE-197

Published

2026-09-09

Last modified

2026-09-09

Affected products

• Google Chrome

Weakness type

• CWE-197

Related vulnerabilities

• CVE-2026-78512 — Microsoft Office Word Remote Code Execution Vulnerability
• CVE-2026-69535 — Windows Spaceport.sys Elevation of Privilege Vulnerability
• CVE-2026-69512 — Windows Spaceport.sys Elevation of Privilege Vulnerability
• CVE-2026-69578 — Windows Kernel Elevation of Privilege Vulnerability
• CVE-2026-68895 — Internet Storage Name Service Information Disclosure Vulnerability
• CVE-2026-68880 — Windows Win32k Elevation of Privilege Vulnerability
• CVE-2026-69822 — Windows Kerberos Elevation of Privilege Vulnerability
• CVE-2026-86315 — An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64...

Markdown version · Browse all CVEs