CVE-2026-87491

Vendor

Google

Product

Chromium V8

CISA KEV

listed

Exposure class

Browser, Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 62
   KEV CISA KEV 9 Sep 2026

   Google Chromium V8 Out of Bounds Write Vulnerability

   Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that…

   KEV Fix available CVE-2026-87491 Google
2. 65
   CISA advisory CISA 9 Sep 2026

   CISA Adds Four Known Exploited Vulnerabilities to Catalog

   CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability…

   Exploited CVE-2025-25249CVE-2026-19490CVE-2026-87491+1 more Google Fortinet
3. 49
   Advisory MSRC 12 Sep 2026

   Chromium CVE-2026-87491: Out of bounds write in V8

   This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Google…

   Exploited Fix available CVE-2026-87491 Microsoft Google