Published Sep 9, 2026, 5:11 AM ET · Updated 2 months ago · 1 source
Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
The Hacker News
·
Original Report
Google on Thursday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild. The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as an out-of-bounds bug in V8, Chrome's JavaScript and WebAssembly engine. "Out-of-bounds write in V8 in Google Chrome prior to