ChangeIntelIT change radar
Public mode

No tenant, Graph, or device access. Every item links to its source. What this means

Some sources or documents need attention: 252/253 feeds/APIs · 391/391 docs · checked 09:45 UTC Customize Public modeDiscuss ChangeIntel on Discord
CVE-2026-87491UnratedCISA KEV · due 23 Sep

Chromium CVE-2026-87491: Out of bounds write in V8

MSRC advisory NVD CVE.orgCISA KEV
Listed in the CISA Known Exploited Vulnerabilities catalog

Added 9 Sep 2026 · federal remediation due 23 Sep 2026.

Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Assessment

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2026-87491 exists in the wild.

Severity
Unrated
CVSS base score
Not published
Impact
Not stated
EPSS, next 30 days
Not scored yet
Public exploit code
No Nuclei template lists it
Exploitability
Not assessed
Publicly disclosed
No
Customer action
Required: apply the update
Component
Microsoft Edge (Chromium-based)
Weakness
—
Issued by
Chrome
Published
11 Sep 2026 · September 2026
Last revised
11 Sep 2026

Updates that fix it

0 KBs

No KB listed

MSRC lists no downloadable update, which usually means a service-side fix or a release-notes update. Check the MSRC advisory.

Affected products

Browser
1 affected product
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Oct 09:45 UTC · 252 of 253 readable · 252 fully read · documentation 391/391 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.