The vulnerability CVE-2026-87579 is a buffer overflow in the WebRTC implementation within Google Chrome before version 153.0.8010.36. Exploitation requires a remote attacker to serve a crafted HTML page that triggers the overflow, enabling arbitrary code execution within the browser's sandbox environment. The vulnerability is identified as CWE-122 (Heap-based Buffer Overflow). There is no public information on active exploitation or a vendor patch at this time.

Successful exploitation could allow an attacker to execute arbitrary code inside the sandboxed environment of Google Chrome, potentially leading to unauthorized actions within the browser context. The impact is limited to the sandbox, reducing the risk of full system compromise. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when visiting untrusted websites and avoid interacting with suspicious HTML content that could trigger this vulnerability.