AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleCVE-2026-87640

Google Chrome: out-of-bounds read

Google

CVE-2026-87640 · Published Sep 9, 2026 · updated Sep 10, 2026

Medium6.1
Fix: upgrade to 153.0.8010.36 or later
Google advisory

Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 153.0.8010.36, < 153.0.8010.36153.0.8010.36
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
Severity from
NVD
Weakness
CWE-125

More Google advisories

All Google
Medium 6.9Sep 9Google cel-go: excessive memory allocationCVE-2026-83530fixed in 0.29.0Medium 5.4Sep 9Google Chrome: clickjackingCVE-2026-87655fixed in 153.0.8010.36Medium 5.4Sep 9Google Chrome: remote attacker could bypass system access restrictionsCVE-2026-87656fixed in 153.0.8010.36Low 3.1Sep 9Google Chrome: use after freeCVE-2026-87657fixed in 153.0.8010.36Medium 4.3Sep 9Google Chrome: information disclosureCVE-2026-87658fixed in 153.0.8010.36Critical 9.6Sep 9Google Chrome: use after freeCVE-2026-87646fixed in 153.0.8010.36