Exploited in the wild Google Chrome zero-day Google web-app
Chrome 153 Patches Seventh Zero-Day of 2026
CVE Tools coverage
Google has shipped Chrome 153 to the stable channel to resolve an actively exploited zero-day tracked as CVE-2026-87491. This medium-severity flaw, characterized as an out-of-bounds write in the V8 engine, marks the seventh such incident addressed by the browser team in 2026. The update also addresses 229 additional security issues, including several critical severity bugs in WebGL and Cast components. Users should upgrade promptly to build 153.0.8010.36 or later on supported operating systems.