// Google CloudHIGH
Google patched CVE-2026-87491, a high-severity out-of-bounds write vulnerability in the Chrome V8 JavaScript engine, which has been actively exploited in the wild. The flaw allows remote code execution via crafted HTML pages. Google released patched versions 153.0.8010.36 (Windows/Linux) and 153.0.8010.37 (macOS). This is the seventh actively exploited Chrome zero-day patched in 2026.
- Google warns of new Chrome zero-day bug exploited in attacks(opens in a new tab)
- Google fixes yet another actively exploited Chrome zero-day (CVE(opens in a new tab)
// Get alerts for Google Cloud