Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
Linked advisories
- CVE-2026-87491Chromium CVE-2026-87491: Out of bounds write in V8
- CVE-2026-87491Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
- CVE-2026-87491Google Chrome: Schreiben außerhalb des zugewiesenen Speichers (Out-of-bounds Write)
- CVE-2026-87491Google Chromium V8 — Google Chromium V8 Out of Bounds Write Vulnerability
Affected vendors and products
More on Execution
Other advisories
- Not ratedCVE-2026-114524Drupal Custom Formatters: Remote Code Execution (RCE)
- Not ratedCVE-2026-114524Drupal Custom Formatters: Remote Code Execution (RCE)
- CriticalCVE-2026-116366ClickHouse Server: unauthenticated remote code execution (CVE-2026-116366)
- Not ratedosv:CVE-2026-61707SOCFortress CoPilot: Stored case-report template injection permits backend code execution
- Not ratedosv:CVE-2026-119193PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling
- HighCVE-2026-61438PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox
- Not ratedosv:CVE-2026-118759Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant
- Not ratedosv:CVE-2025-13050Broken Function Level Authorization — `postcommand.php` allows execution of poller post-restart commands by non-admin users
Other news entries
- Anthropic AI model finds Linux kernel bug that leads to remote root accessNewsCSO Online
- Erneut kritischer Bug in Linux TCP/IP aufgedeckt – Updates in ArbeitNewsheise Security
- Fresh WordPress Vulnerability in Attackers’ CrosshairsNewsSecurityWeek
- Adobe, Veeam, Juniper Networks Patch Critical VulnerabilitiesNewsSecurityWeek
- Trusting Unsloth’s trust setting could mean executing malicious codeNewsCSO Online
- Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security BypassNewsThe Hacker News
- Hackers Start Probing Fresh Oracle EBS VulnerabilityNewsSecurityWeek
- Code-execution flaw in UEFI firmware affects most servers on planet EarthNewsArs Technica — Security
Source: https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html
ID