CyberRota Analysis
AI-GeneratedA use-after-free vulnerability in the Web Authentication component of Google Chrome prior to version 153.0.8010.36 allows remote attackers to execute arbitrary code outside the browser's sandbox by leveraging a specially crafted HTML page. This poses a significant risk to users, particularly in environments where web applications are heavily utilized. Organizations and individuals using affected versions of Chrome should prioritize updating to mitigate potential exploitation.
CVE
CVE-2026-87646
Severity
CRITICAL
CVSS
9.6
EPSS
0.36%
Chrome
Original NVD Description
Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Related CVEs
Other vulnerabilities affecting the same vendor(s)