CyberRota Analysis
AI-GeneratedA type confusion vulnerability in the XML processing component of Google Chrome versions prior to 153.0.8010.36 could allow remote attackers to execute arbitrary code within the browser's sandbox environment through a specially crafted HTML page. This poses a significant risk to users who may inadvertently visit malicious websites. Organizations and individuals using affected versions of Chrome should prioritize updating to the latest version to mitigate potential exploitation.
CVE
CVE-2026-87636
Severity
HIGH
CVSS
8.8
EPSS
0.31%
Chrome
Original NVD Description
Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)