CVE-2026-87504

A use-after-free vulnerability in the Core component of Google Chrome prior to version 153.0.8010.36 allows remote attackers to execute arbitrary code outside the browser's sandbox by leveraging social engineering tactics through a malicious Chrome extension. This poses a medium security risk, particularly for organizations that utilize Chrome in environments where users may be exposed to untrusted extensions. Users and administrators should prioritize updating to the latest version to mitigate the risk of exploitation.