NetSight
IP …
critical9.6

CVE-2026-87464

Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.

Impact

Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Affected products

VendorProductAffected versions
GoogleChrome
before 153.0.8010.36

Weakness classification

CWE-416

References