SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-87640

MEDIUM · CVSS 6.1 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-09-09 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A vulnerability in WebView within Google Chrome on Android versions prior to 153.0.8010.36 allows remote attackers to exploit an out-of-bounds read, enabling them to access memory outside the sandbox through a specially crafted HTML page. This could lead to unauthorized information disclosure, potentially compromising user data. Android developers and organizations utilizing Chrome on Android should prioritize patching to mitigate this risk.

CVE
CVE-2026-87640
Severity
MEDIUM
CVSS
6.1
EPSS
0.21%
Android Chrome

Original NVD Description

Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Related CVEs

Other vulnerabilities affecting the same vendor(s)