This vulnerability is due to incorrect authorization in Views within Google Chrome on Windows platforms before version 153.0.8010.36. An attacker who has already compromised the renderer process and employs social engineering techniques could potentially execute arbitrary code outside the browser sandbox by delivering a specially crafted HTML page. The issue was assigned CVE-2026-87644 and is classified with medium severity by Chromium security. The vulnerability is fixed in Chrome version 153.0.8010.36.

Successful exploitation could allow an attacker with control over the renderer process and the ability to trick a user via social engineering to execute arbitrary code outside the sandbox, potentially leading to further system compromise. However, exploitation requires prior renderer compromise and social engineering, limiting the attack vector scope.

Users should update Google Chrome to version 153.0.8010.36 or later, where this vulnerability is fixed. There is no indication that any temporary or alternative mitigations are available. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html for more details.