Update Chrome Now: Seventh Exploited Zero-Day of the Year
Google said the flaw is the seventh Chrome zero-day patched in 2026 and may let attackers run code or read memory through a crafted page.
- On Tuesday, Google released Chrome 153, addressing 230 vulnerabilities including an actively exploited zero-day flaw already being used against real users in the wild.
- Designated CVE-2026-87491, this flaw marks the seventh actively exploited zero-day Google has patched in 2026, approaching the eight vulnerabilities addressed throughout 2025.
- The vulnerability involves an out-of-bounds write in the JavaScript and WebAssembly engine, allowing attackers to trigger heap corruption via a specially crafted HTML page.
- Technical details remain restricted until most users update to version 153.0, protecting against further exploitation while Google withholds specifics on how the bug is being exploited.
- Jihyeon Jeong, a research intern at Seoul National University's Compsec Lab, reported the flaw on August 6, earning a $2,500 bounty while Google's Threat Analysis Group continues spyware monitoring.
15 Articles
15 Articles
Google fixes Chrome security flaw already being used against users
Chrome has a new zero-day, and it's already being used against real users. Google shipped Chrome 153 on Tuesday, patching 230 vulnerabilities, including a bug attackers found before Google did.This...
Chrome 153 lands with a particularly loaded security update. Google fixes 230 vulnerabilities, including a new zero-day fault in V8, already exploited in attacks.
Google patches Chrome zero-day exploited by hackers – update now! | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker - National Cyber Security Consulting
Google has released Chrome 153 with security fixes for desktop and Android users, including a vulnerability that attackers are already exploiting in the wild. Key takeaways Google has released Chrome 153 with a large batch of security fixes CVE-2026-87491 affects Chrome's V8 JavaScript engine Google confirms that an exploit for the vulnerability is already being […] Thank you for subscribing to our RSS feed!
Google Patches Chrome's Seventh Zero-Day of 2026 in Just Two Days
Google patched CVE-2026-87491, a V8 engine flaw already being exploited in the wild, just two days after a Seoul National University researcher reported it. It's the seventh actively exploited Chrome zero-day of 2026, and four of the seven trace back to the same engine.
Coverage Details
Bias Distribution
- 67% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
