https://www.phllaps.net/tags/google/ Recent content in Google on PhllapsNET Hugo en-gb Wed, 09 Sep 2026 00:00:00 +0000 https://www.phllaps.net/posts/google-chromium-v8-out-of-bounds-write-vulnerability/ Wed, 09 Sep 2026 00:00:00 +0000 https://www.phllaps.net/posts/google-chromium-v8-out-of-bounds-write-vulnerability/ <div style="background:#dc2626;color:white;padding:16px 18px;border-radius:14px;font-weight:800;font-size:18px;display:flex;align-items:center;gap:12px;box-shadow:0 10px 24px rgba(0,0,0,0.18);"><span style="font-size:24px;">🚨</span><span>SEVERITY: HIGH — CVSS 8.8</span><span style="opacity:0.95;font-weight:700;margin-left:auto;">Security Advisory</span></div> <h2 id="tldr-">TL;DR 📌</h2> <ul> <li>Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.</li> <li>Highest CVSS: <strong>8.8 (High)</strong>.</li> <li><strong>Listed in CISA KEV</strong> (2026-09-09) — this is being exploited in the wild.</li> <li><strong>Fixed in <code>153.0.8010.36</code></strong> — upgrade to this release or later.</li> <li>CVEs: CVE-2026-87491.</li> </ul> <h2 id="what-it-is">What it is</h2> <p>CVE-2026-87491 is an out-of-bounds write in V8, Chromium&rsquo;s JavaScript and WebAssembly engine. The flaw sits in the engine itself, not in a browser-specific extension or UI component, so it affects any browser built on the vulnerable Chromium codebase.</p>