10 September 2026
Reference: CVE-2026-87491
1. What is being reported?
The report is about a security weakness in the Chromium V8 engine used by Google Chrome browsers before version 153.0.8010.36. This weakness allows attackers to write data outside the allowed memory area, potentially letting them run harmful code inside Chrome’s security sandbox by tricking users into visiting a crafted web page.
2. What this means in plain English
If your organisation uses Google Chrome and visits websites, this flaw could let hackers take control of your computer or steal information without your knowledge. This risk is serious because the flaw is actively being exploited by criminals online.
3. Could this affect a small business?
Any small business, charity, or club using Google Chrome on their computers could be affected, especially if the browser is not updated. Those who do not use Chrome or have automatic updates enabled are less likely to be at risk, but it is still important to check.
4. What to do now
- Check which version of Google Chrome you are using and update it immediately to version 153.0.8010.36 or later.
- If you use managed devices, ensure your IT provider applies the update across all computers promptly.
- Avoid clicking on suspicious links or visiting unknown websites until the update is applied.
- Confirm with your IT provider that any cloud services using Chromium V8 are also protected or mitigated according to official guidance.
5. Ask your IT provider
Can you confirm that all our Google Chrome browsers and any related cloud services have been updated or mitigated against the CVE-2026-87491 vulnerability?
6. Bottom line
Keep your Google Chrome browser updated without delay to protect your organisation from an actively exploited security flaw.
Information based on CISA KEV, NVD and reputable security reporting.