Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML… (CVE-2026-87630)
Source GCVE Database
Not known to be exploited.
Data as of 10/25/2026, 04:40:14 UTC
CVSS not yet scored by NVD
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 16% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
What to do
AI-suggested
Users should update Google Chrome to version 153.0.8010.36 or later once the update is available. Until then, exercise caution when visiting untrusted websites that might host crafted HTML content targeting this vulnerability.
Description
An integer overflow vulnerability exists in the WebRTC component of Google Chrome versions prior to 153.0.8010.36. This flaw allows a remote attacker to read memory inside the browser's sandbox by delivering a specially crafted HTML page. The vulnerability is classified with medium severity by Chromium security. No information about patches or exploits in the wild is currently available.
Impact
A successful exploit could allow a remote attacker to read memory inside the sandboxed environment of the Chrome browser. This could potentially lead to information disclosure from the browser's memory space. The impact is limited to memory disclosure within the sandbox and does not indicate code execution or privilege escalation based on the available data.
Summary
CVE-2026-87630 is an integer overflow vulnerability in the WebRTC implementation of Google Chrome before version 153.0.8010.36. Exploiting this flaw, a remote attacker can cause memory reads within the sandbox environment by using a crafted HTML page. The vulnerability relates to CWE-190 (Integer Overflow or Wraparound). There is no CVSS score provided, and no known exploits have been reported in the wild. The vulnerability affects Chrome browser versions prior to 153.0.8010.36.
Weaknesses
- CWE-190Integer Overflow or Wraparound (opens in a new tab)
Base weaknessLikelihood of exploit: Medium
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.