CVE-2026-87616

The record

Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Affected packages

Related vulnerabilities

• CVE-2026-78940 Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a… CWE-665
• CVE-2026-12233 The PSA Protected Storage credential backend (subsys/net/lib/tls_credentials/tls_credenti… CWE-665
• CVE-2026-54777 CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET… CWE-665
• CVE-2026-54409 A malicious actor with access to the network and under certain conditions could exploit… CWE-665
• CVE-2026-54279 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. CWE-665
• GHSA-cmwh-pvxp-8882 DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook… CWE-665
• CVE-2026-12539 Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at… CWE-665
• CVE-2025-35991 Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare… CWE-665