CVE-2026-87657 is a use-after-free vulnerability in the V8 engine component of Google Chrome before version 153.0.8010.36. An attacker with control over the renderer process can exploit this flaw to read memory within the sandbox environment by using a specially crafted HTML page. This vulnerability could lead to information disclosure from the sandboxed process. The issue is publicly disclosed but lacks a CVSS score and no known active exploitation has been reported. The vendor has released a stable channel update addressing this issue in Chrome 153.0.8010.36.

Successful exploitation allows an attacker who has already compromised the renderer process to read memory inside the sandbox, potentially exposing sensitive information. The vulnerability does not allow initial compromise but can be used to escalate information disclosure within the sandboxed environment. No known exploits in the wild have been reported.

Google has released an update in Chrome version 153.0.8010.36 that fixes this vulnerability. Users and administrators should update to this version or later to remediate the issue. Patch status is confirmed by the vendor advisory. No additional mitigation is indicated.