Story perspectives

Chrome 153 patches 230 bugs, including active CVE-2026-87491

9/9/2026

Summary

Google patches Chrome

Google released Chrome 153.0.8010.36 fixing 230 vulnerabilities, including actively exploited CVE-2026-87491.
Google said the CVE-2026-87491 exploit is active in the wild.
Researcher Jihyeon Jeong of Seoul National University reported the flaw on August 6, 2026.
Google awarded Jeong a $2,500 bounty for the responsible disclosure.
CVE-2026-87491 is the seventh Chrome zero-day exploited in 2026, a medium-severity V8 out-of-bounds write with CVSS 8.8.

Summary

Google updates Chrome

Google released Chrome 153 update, delivering version 153.0.8010.36 to Linux and Windows/macOS (also .37).
Google’s security team employed AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer and AFL to uncover bugs.
Google will keep detailed bug information restricted until most users install the patch.
Users are urged to restart Chrome after updating and verify the version via Settings -> About Chrome.
OpenAI Codex Security discovered a high-severity use-after-free flaw in WebPackaging (CVE-2026-87639).

1 of 2

Google patches Chrome

Google released Chrome 153.0.8010.36 fixing 230 vulnerabilities, including actively exploited CVE-2026-87491.
Google said the CVE-2026-87491 exploit is active in the wild.
Researcher Jihyeon Jeong of Seoul National University reported the flaw on August 6, 2026.
Google awarded Jeong a $2,500 bounty for the responsible disclosure.
CVE-2026-87491 is the seventh Chrome zero-day exploited in 2026, a medium-severity V8 out-of-bounds write with CVSS 8.8.

1 / 2