SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-87509

HIGH · CVSS 8.1 EPSS 0.10%

Source: NVD + CISA KEV + EPSS · Published 2026-09-09 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A vulnerability in the Updater component of Google Chrome on Windows prior to version 153.0.8010.36 allows local attackers to execute arbitrary code outside of the browser's sandbox environment. This could potentially lead to unauthorized actions on the system. Users and organizations utilizing affected versions of Chrome on Windows should prioritize updating to mitigate the risk of local exploitation.

CVE
CVE-2026-87509
Severity
HIGH
CVSS
8.1
EPSS
0.10%
Windows Chrome

Original NVD Description

Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Low)

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-58704 HIGH CVE-2026-75624 HIGH CVE-2026-87658 MEDIUM CVE-2026-87657 LOW CVE-2026-87656 MEDIUM CVE-2026-87655 MEDIUM