CISA KEV: Google Chromium V8 — Google Chromium V8 Out of Bounds Write Vulnerability

Wednesday, September 9, 2026 at 12:00 AM UTC·Source: CISA KEV

Updated: Wednesday, September 9, 2026 at 08:02 PM UTC

Executive Summary

Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-87491

NVD MITRE CVE

Source Attribution

Originally published by CISA KEV on Sep 9, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

NatWest hires former Ikea exec to lead customer experience and digital engagement

NatWest has brought in banking outsider and Ikea executive Harsh Agarwal as manging director, customer experience and engagement.

16m agoFinextra

MEDIUMVulnerability

72% of US consumers have used an AI assistant – Visa Trust Index

New research from Visa Trust Index revealed that consumers are increasingly using AI in their payment journey.

2h agoFinextra

CRITICALVulnerability

NVD CRITICAL: CVE-2026-89259 — Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under N...

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration (--allow-addons, --allow-child-process, --allow-worker). As a result, the restrictions intended by the fix for GHSA-x597-9fr4-5857 could still be bypassed, allowing a Node tool invoked

CVE-2026-89259

2h agoNIST NVD