Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
Google released updates patching 230 security vulnerabilities, including CVE-2026-87491, an out-of-bounds write in Chrome's V8 engine (CVSS 8.8) that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Google said...