CVE-2026-87524 is a use-after-free vulnerability (CWE-416) in the Core of Google Chrome on Windows platforms before version 153.0.8010.36. Exploitation requires prior compromise of the renderer process and involves crafted HTML content to achieve code execution beyond the sandbox restrictions. The vulnerability is recognized as high severity by Chromium security but lacks detailed CVSS metrics and explicit patch information in the provided data.

Successful exploitation could allow an attacker with control over the renderer process to execute arbitrary code outside the sandbox environment, potentially leading to further system compromise. However, exploitation requires initial renderer process compromise, limiting the attack vector to scenarios where the attacker already has some foothold.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links or official remediation details are provided, users should monitor official Google Chrome security advisories for updates and apply updates promptly once available.