CVE-2026-87621 is an out-of-bounds write vulnerability (CWE-787) in the ANGLE component of Google Chrome on Windows platforms before version 153.0.8010.36. This vulnerability allows remote attackers to potentially execute arbitrary code outside the sandbox via a specially crafted HTML page. The vulnerability was assigned a high severity rating by the Chromium security team. There is no CVSS score available, and no known exploits have been reported in the wild. The vendor advisory or patch information is not provided, so patch status remains unconfirmed.

Successful exploitation could lead to arbitrary code execution outside the sandbox, which may compromise the security boundaries of the browser and the underlying system. This could allow attackers to run malicious code remotely by convincing users to visit a maliciously crafted web page.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is applied, users should exercise caution when visiting untrusted websites and consider using additional security controls such as sandboxing and endpoint protection.