CVE-2026-87585
Severity CVSS v4.0:
Pending analysis
Type:
CWE-415
Double Free
Publication date:
09/09/2026
Last modified:
09/09/2026
Description
Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)