Chrome V8 flaw CVE-2026-87491 is exploited: update the browser

high severity · exploited in the wild · published 2026-09-08

A crafted web page can run attacker code inside the browser sandbox through an out-of-bounds write in the V8 engine, and attackers already use it in the wild.

Fixed in: 153.0.8010.36

CVE: CVE-2026-87491

Source: Google Chrome Releases

Am I affected?

You are affected if the installed version is older than 153.0.8010.36. Check the version you have and update to 153.0.8010.36 or later. The fixed version is verified against a vendor or advisory source.

Get the fix

FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 69 and your operating system.