VDB

CVE-2026-87491

CVE-2026-87491 PUBLISHED KEV

As of September 8, 2026, Google is affected by vulnerabilities in the following product: Chrome Prior to 153.0.8010.37 Google is aware that an exploit for CVE-2026-87491 exists in the wild. On September 9, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-87491 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

EPSS 3.14% · 87.8th percentile

Risk Scores

EPSS Score
3.14%
87.8th percentile

Affected Products

VendorProductVersions
PriorPrior to 153.0.8010.37

Timeline

  • Mar 26, 2020 VulnCheck KEV Exploitation
  • Sep 8, 2026 VulnCheck KEV Exploitation
  • Sep 8, 2026 PoC Published
  • Sep 9, 2026 CISA KEV Added
  • Sep 9, 2026 VulnCheck KEV Exploitation
  • Sep 9, 2026 EPSS Score
  • Sep 9, 2026 Coalition ESS Score
  • Sep 9, 2026 CVE Published
  • Sep 10, 2026 EPSS Score
  • Sep 10, 2026 VulnCheck XDB Entry
  • Sep 11, 2026 EPSS Score
  • Sep 12, 2026 VulnCheck XDB Entry
Open in Interactive Console →
$ Console Community · 50/day Open console ›