Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

Google has released updates to fix 230 security vulnerabilities, including a medium-severity issue in Chrome's V8 JavaScript engine that is being actively exploited. The vulnerability is an out-of-bounds bug that has been assigned the identifier CVE-2026-87491. This bug affects Google Chrome prior to a recent update and could potentially enable code execution inside a sandbox. The vulnerability is related to an out-of-bounds write in V8. Google has patched this issue along with 229 other security vulnerabilities. The CVSS score for this vulnerability is not available.