CVE-2026-87618: Incorrect reference resolution in Google Chrome

The vulnerability CVE-2026-87618 affects Google Chrome on Windows versions before 153.0.8010.36. It involves incorrect reference resolution in the Storage component, which can be exploited by a remote attacker who has already compromised the renderer process. Exploitation could lead to arbitrary code execution outside the sandbox environment. The issue has been assigned a CVSS 3.1 base score of 8.3, indicating high severity. Google has published a stable channel update to fix this vulnerability.

Successful exploitation of this vulnerability could allow an attacker with control over the renderer process to execute arbitrary code outside the sandbox, potentially compromising the host system. The impact includes full confidentiality, integrity, and availability loss as indicated by the CVSS vector. However, exploitation requires prior compromise of the renderer process and user interaction.

Google has released an official fix in Chrome version 153.0.8010.36. Users and administrators should update affected Chrome installations to this version or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.