Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
Linked advisories
- CVE-2026-87491Chromium CVE-2026-87491: Out of bounds write in V8
- CVE-2026-87491Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
- CVE-2026-87491Google Chrome: Schreiben außerhalb des zugewiesenen Speichers (Out-of-bounds Write)
- CVE-2026-87491Google Chromium V8 — Google Chromium V8 Out of Bounds Write Vulnerability
Affected vendors and products
More on Execution
Other advisories
- Not ratedCVE-2026-16306INFINITT Healthcare System Manager: Remote Code Execution (RCE)
- Not ratedCVE-2026-16306INFINITT Healthcare System Manager: Remote Code Execution (RCE)
- Not ratedosv:CLEANSTART-2024-XG79226When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code execution
- Not ratedosv:CLEANSTART-2026-YK18302During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data
- Not ratedosv:CLEANSTART-2023-BN75372Exim libspf2 Integer Underflow Remote Code Execution Vulnerability
- Not ratedosv:CLEANSTART-2024-US02073Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker
- Not ratedosv:CLEANSTART-2024-AH27433code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2
- Not ratedosv:CLEANSTART-2023-VL53503potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3
Other news entries
- Over 1,000 GitLab servers vulnerable to ongoing RCE attacksNewsBleepingComputer
- From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion pathsNewsMicrosoft Threat Intelligence
- WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursNewsThe Hacker News
- Anthropic AI model finds Linux kernel bug that leads to remote root accessNewsCSO Online
- Erneut kritischer Bug in Linux TCP/IP aufgedeckt – Updates in ArbeitNewsheise Security
- Fresh WordPress Vulnerability in Attackers’ CrosshairsNewsSecurityWeek
- Cohere’s Qwen Story: Looks More Like Model JaggednessNewsCheck Point Research
- Adobe, Veeam, Juniper Networks Patch Critical VulnerabilitiesNewsSecurityWeek
Source: https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html
ID