Threats tagged 'ghsa-6675-3c32-93fw'

CVE-2026-87504 is a use-after-free vulnerability in the Core component of Google Chrome prior to version 153.0.8010.36. This flaw allows a remote attacker, through social engineering and a crafted Chrome extension, to execute arbitrary code outside the browser sandbox. The vulnerability has a high CVSS score of 9.6, indicating critical severity. It affects versions before 153.0.8010.36. Google has published an advisory indicating a stable channel update addressing this issue.