Loading vulnerability…
Sandbox escape via out-of-bounds read in Google Chrome ANGLE
CVE-2026-87604 is a high-severity out-of-bounds read vulnerability in the ANGLE graphics component of Google Chrome versions earlier than 153.0.8010.36. A remote attacker who has already compromised the renderer process can use a crafted HTML page to potentially execute arbitrary code outside the browser sandbox. The specific vulnerable function and memory-access conditions are not identified.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can escape the browser sandbox and execute arbitrary code outside the compromised renderer's isolation boundary, potentially compromising the confidentiality, integrity, and availability of resources accessible to the resulting execution context. This vulnerability requires an existing renderer compromise; it is not established as a standalone initial-compromise mechanism.
If you can’t patch tonight, do this now.
No vulnerability-specific workaround is identified. Until patched, restrict use of affected browser installations and limit exposure to untrusted web content. These exposure-reduction measures do not replace the security update.
Patch, then assume compromise.
Upgrade Google Chrome to version 153.0.8010.36 or later; use 153.0.8010.37 or later on macOS to satisfy the platform-specific update guidance. For Debian stable (trixie), update Chromium to 153.0.8010.47-2~deb13u1 or later. For affected RHEL WebKitGTK installations, apply RHSA-2026:84584 on RHEL 8 or RHSA-2026:84583 on RHEL 9, providing webkit2gtk3 2.54.1-1.el8_10 and 2.54.1-1.el9_8, respectively. Other affected distributions should install their corresponding vendor security updates. Prisma Browser includes this CVE's fix in 153.3.3.37; version 155.16.5.40 or later addresses the complete October advisory.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
16 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.