Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the… (CVE-2026-87602)
Source GCVE Database
Not known to be exploited · fixed in 153.0.8010.36 : update affected systems when convenient.
Data as of 10/25/2026, 04:40:14 UTC
CVSS not yet scored by NVD
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 6% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 153.0.8010.36
What to do
AI-suggested
A fix is available in Google Chrome version 153.0.8010.36 and later. Users and administrators should update to this version or newer to remediate the vulnerability. Since this is not a cloud service, patching the client software is required.
Description
An out-of-bounds read vulnerability exists in the ANGLE component of Google Chrome on Windows versions prior to 153.0.8010.36. This flaw could allow a remote attacker to read memory outside the sandbox by crafting a malicious HTML page. The Chromium project has assigned this issue a low security severity rating.
Impact
The vulnerability could allow an attacker to read memory outside the intended sandbox, potentially exposing sensitive information. However, the Chromium security team has rated the severity as low, indicating limited impact and exploitability. There are no known exploits in the wild at this time.
Weaknesses
- CWE-125Out-of-bounds Read (opens in a new tab)
Base weaknessCWE Top 25 (2025): #8
The product reads data past the end, or before the beginning, of the intended buffer.