CVE-2026-87526 is a use-after-free vulnerability in the Passwords component of Google Chrome before version 153.0.8010.36. Exploitation requires social engineering to induce user interaction with the UI, potentially enabling remote code execution outside the sandbox. The vulnerability is categorized under CWE-416 (Use After Free). No CVSS score or detailed vendor advisory is available in the provided data. No known exploits have been reported.

Successful exploitation could allow a remote attacker to execute arbitrary code outside the sandbox environment of Google Chrome, potentially compromising the affected system. The attack requires social engineering to trick the user into interacting with the UI, which is a prerequisite for exploitation. The Chromium security team rates this vulnerability as medium severity. No evidence of active exploitation is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users and administrators should monitor official Google Chrome security advisories for updates. Until a fix is available, exercising caution with unsolicited content and social engineering attempts is advisable.