{"metadata": {"vulnerability": "CVE-2026-87491", "count": 168, "kinds": {"milestone": 15, "sighting": 87, "kev": 11, "other": 55}, "linked_omitted": 0}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0354", "record": "NCSC-2026-0354", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-09-08T00:00:00Z", "date_only": true, "value": "2026-09-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1139", "record": "CERTFR-2026-AVI-1139", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-09-08T22:00:00Z", "date_only": false, "value": "2026-09-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-09-08T22:00:00Z", "date_only": false, "value": "2026-09-08T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-08T22:00:00Z", "date_only": false, "value": "2026-09-08T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "vulnerabilities.62.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-08T22:38:36.226Z", "date_only": false, "value": "2026-09-08T22:38:36.226Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-87491", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": true, "value": "2026-09-09", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-87491", "field": "containers.adp.0.metrics.2.other.content.dateAdded"}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": true, "value": "2026-09-09", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "evidence.0.details.date_added", "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1139", "record": "CERTFR-2026-AVI-1139", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1139", "record": "CERTFR-2026-AVI-1139", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1139", "record": "CERTFR-2026-AVI-1139", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "status.status_updated_at", "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T00:09:38.419Z", "date_only": false, "value": "2026-09-09T00:09:38.419Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-87491", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-09T00:09:38.419Z", "date_only": false, "value": "2026-09-09T00:09:38.419Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Chrome", "record": "CVE-2026-87491", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-09T00:17:22.245Z", "date_only": false, "value": "2026-09-09T00:17:22.245186Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv2b57rson2t", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "9d9df07f-b801-4a52-9803-e415e08c1514", "content": "Google patched a Chrome zero-day, CVE-2026-87491, exploited in the wild. Chrome 153 fixes 230 flaws including critical WebGL bugs. Update now.\n\n#Chrome #ZeroDay #Google #CyberSecurity #CVE #V8 #BrowserSecurity #Infosec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mv2b57rson2t"}, {"timestamp": "2026-09-09T00:34:06.604Z", "date_only": false, "value": "2026-09-09T00:34:06.604349Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mv2c2kmmg25i", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "4137000c-0fef-4c7f-99d6-b54cccbf4778", "content": "\u30bc\u30ed\u30c7\u30a4\u3042\u308a > \"Google is aware that an exploit for CVE-2026-87491 exists in the wild.\"", "url": "https://bsky.app/profile/shiojiri.com/post/3mv2c2kmmg25i"}, {"timestamp": "2026-09-09T01:05:50.532Z", "date_only": false, "value": "2026-09-09T01:05:50.532569Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mv2dtu3cuo2r", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "d19f999c-150a-4207-abd3-477537c52916", "content": "Chrome Bleeds Again. Everyone Pretends Browser Patches Are Optional\nPANIC 78% | Lag 0.0h | Google has patched a Chrome zero-day, CVE-2026-87491, reportedly exploited in the wild. Chrome 153 a\n#AfterShockIndex\nREAD MORE", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mv2dtu3cuo2r"}, {"timestamp": "2026-09-09T01:17:05Z", "date_only": false, "value": "2026-09-09T01:17:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8X3P-8G9V-XC7M", "record": "GHSA-8X3P-8G9V-XC7M", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-09-09T01:17:05.887Z", "date_only": false, "value": "2026-09-09T01:17:05.887", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-87491", "record": "FKIE_CVE-2026-87491", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-09T03:30:39Z", "date_only": false, "value": "2026-09-09T03:30:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8X3P-8G9V-XC7M", "record": "GHSA-8X3P-8G9V-XC7M", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-09T08:00:59Z", "date_only": false, "value": "2026-09-09T08:00:59+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-87491", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2185e47b-f812-47b3-bbdf-ece52ef1e638", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T08:00:59Z", "date_only": false, "value": "2026-09-09T08:00:59.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-87491", "field": "evidence.0.details.added_date", "uuid": "2185e47b-f812-47b3-bbdf-ece52ef1e638", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T08:00:59Z", "date_only": false, "value": "2026-09-09T08:00:59+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-87491", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2185e47b-f812-47b3-bbdf-ece52ef1e638", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T08:00:59Z", "date_only": false, "value": "2026-09-09T08:00:59+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-87491", "field": "status.status_updated_at", "uuid": "2185e47b-f812-47b3-bbdf-ece52ef1e638", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-09T08:10:02.736Z", "date_only": false, "value": "2026-09-09T08:10:02.736745Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mv33kdt7uc2s", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "ce503a97-e3d2-4124-b200-994d2f30107d", "content": "Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/09/09/g...\n\n#Chrome #exploit #cybersecurity", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3mv33kdt7uc2s"}, {"timestamp": "2026-09-09T08:23:59.524Z", "date_only": false, "value": "2026-09-09T08:23:59.524970Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mv34dcutfk2k", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "8dc0b0d0-2377-4778-900e-c9fee246cbcb", "content": "Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)\n\nwww.helpnetsecurity.com/2026/09/09/g...\n\n#Cybersecurity #Cyber #SituationalAwareness", "url": "https://bsky.app/profile/hapsis.bsky.social/post/3mv34dcutfk2k"}, {"timestamp": "2026-09-09T09:09:33.663Z", "date_only": false, "value": "2026-09-09T09:09:33.663372Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deskmodder.de/post/3mv36utvm222g", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "84276845-55b3-4785-86ab-6154f14ecfdf", "content": "Google Chrome 153 (153.0.8010.36/.37) korrigiert 230 Sicherheitsl\u00fccken - CVE-2026-87491 in der freien Wildbahn", "url": "https://bsky.app/profile/deskmodder.de/post/3mv36utvm222g"}, {"timestamp": "2026-09-09T09:25:44.769Z", "date_only": false, "value": "2026-09-09T09:25:44.769466Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv37r4imi52v", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "52affb79-4ed1-40d5-9cfa-cc0d7772079e", "content": "Google patched 230 security vulnerabilities in Chrome, including CVE-2026-87491, an actively exploited V8 out-of-bounds bug enabling sandbox escape and arbitrary code execution.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv37r4imi52v"}, {"timestamp": "2026-09-09T09:43:39.015Z", "date_only": false, "value": "2026-09-09T09:43:39.015429Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0354", "record": "NCSC-2026-0354", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-09-09T09:43:39.015Z", "date_only": false, "value": "2026-09-09T09:43:39.015429Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0354", "record": "NCSC-2026-0354", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-09T09:43:39.015Z", "date_only": false, "value": "2026-09-09T09:43:39.015429Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0354", "record": "NCSC-2026-0354", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-09T09:53:45.364Z", "date_only": false, "value": "2026-09-09T09:53:45.364173Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv3bdulshr2g", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "bdd5f06d-96f4-4bf3-919a-f019978959a8", "content": "Chrome 153 stable patches 230 vulnerabilities, including exploited zero-day CVE-2026-87491, and addresses multiple critical and high-severity issues across V8, WebGL, and Cast.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv3bdulshr2g"}, {"timestamp": "2026-09-09T10:02:57.527Z", "date_only": false, "value": "2026-09-09T10:02:57.527872Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0354", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "dd7b28e8-635f-41d9-8673-95e5ba853dfd", "content": "Google heeft een zeroday-kwetsbaarheid verholpen in de V8 JavaScript engine van Google Chrome. Google meldt dat de kwetsbaarheid met kenmerk CVE-2026-87491 actief wordt misbruikt. Het betreft een out-of-bounds write in de V8-engine van Google Chrome, die voorkomt in versies v\u00f3\u00f3r 153.0.8010.36. Een kwaadwillende kan een speciaal vervaardigde HTML-pagina gebruiken om de kwetsbaarheid te activeren en binnen de sandbox willekeurige code uit te voeren. De kwetsbaarheid wordt veroorzaakt door onjuiste bounds checking in het geheugenbeheer van V8, wat kan leiden tot geheugenbeschadiging. Succesvol misbruik kan daarnaast leiden tot toegang tot gegevens buiten de toegewezen geheugenbuffer, waardoor gevoelige informatie kan worden buitgemaakt of de browser kan crashen.", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0354"}, {"timestamp": "2026-09-09T11:09:45.831Z", "date_only": false, "value": "2026-09-09T11:09:45.831424Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv3flromy327", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "9ae8b418-2f86-41d6-8ca7-e3a098555f8f", "content": "Update Chrome now: CVE-2026-87491, a V8 out-of-bounds write, is exploited in the wild. Patch to 153.0.8010.36/.37 (Windows/macOS) or .36 (Linux) and relaunch. https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv3flromy327"}, {"timestamp": "2026-09-09T11:10:29.372Z", "date_only": false, "value": "2026-09-09T11:10:29.372970Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mv3fn3eyin2e", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "8ac38269-5743-4207-80d3-e8ce6d3f1db9", "content": "Chrome V8\u306e\u8106\u5f31\u6027(CVE-2026-87491)\u304c\u5b9f\u4e16\u754c\u3067\u60aa\u7528\u3055\u308c\u3001\u30b5\u30f3\u30c9\u30dc\u30c3\u30af\u30b9\u5185\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3002Google\u306f\u4fee\u6b63\u6e08\u307f\u3002", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mv3fn3eyin2e"}, {"timestamp": "2026-09-09T12:00:04.406Z", "date_only": false, "value": "2026-09-09T12:00:04.406970Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackerNewscyber/3431", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "686acb30-342a-4d96-8657-0147aa947e8b", "content": "\u2708  \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u06a9\u0631\u0648\u0645 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0641\u0639\u0627\u0644\n\n\u00a9\ufe0f \u06af\u0648\u06af\u0644 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u062f\u0631 \u0645\u0648\u062a\u0648\u0631 V8 \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0631\u0648\u0645 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-87491 \u0631\u0627 \u06a9\u0647 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u060c \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u06cc\u06a9 \u0635\u0641\u062d\u0647 \u0627\u0686\u200c\u062a\u06cc\u200c\u0627\u0645\u200c\u0627\u0644 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062f\u0631 \u0645\u062d\u06cc\u0637 \u0627\u06cc\u0632\u0648\u0644\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u06af\u0648\u06af\u0644 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u06a9\u0631\u0648\u0645\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648 \u06f2\u06f3\u06f0 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u06cc\u06af\u0631 \u0631\u0627 \u0627\u0635\u0644\u0627\u062d \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u06a9\u0631\u062f\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0631\u0627 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "url": "https://t.me/HackerNewscyber/3431"}, {"timestamp": "2026-09-09T12:00:04.495Z", "date_only": false, "value": "2026-09-09T12:00:04.495950Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/10010", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "b8498a27-6cf6-4547-bfec-ac13cfb527a4", "content": "\u26a0\ufe0f ALERT - Google patched a new actively exploited Chrome V8 zero-day.\n\nCVE-2026-87491 lets crafted HTML execute arbitrary code inside Chrome\u2019s sandbox. Google has not said how it\u2019s being weaponized or who is behind it.\n\nRead: https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "url": "https://t.me/thehackernews/10010"}, {"timestamp": "2026-09-09T12:15:13.617Z", "date_only": false, "value": "2026-09-09T12:15:13.617229Z", "kind": "sighting", "label": "Seen", "source": "https://www.ncsc.nl/alerts/actief-misbruik-zero-day-kwetsbaarheid-in-google-chrome-v8-update-nu", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "8556fb80-6e60-41c2-969b-9ce3b125188f", "url": "https://www.ncsc.nl/alerts/actief-misbruik-zero-day-kwetsbaarheid-in-google-chrome-v8-update-nu"}, {"timestamp": "2026-09-09T12:46:30.428Z", "date_only": false, "value": "2026-09-09T12:46:30.428369Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117241150833718533", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "e9a24857-f6cd-4ee3-89ed-67db5f847c3b", "content": "The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as an out-of-bounds bug in V8, Chrome's JavaScript and WebAssembly engine. https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "url": "https://infosec.exchange/users/jbhall56/statuses/117241150833718533"}, {"timestamp": "2026-09-09T12:46:39.368Z", "date_only": false, "value": "2026-09-09T12:46:39.368472Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mv3kyzdopk2j", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "9b487392-3741-4c7b-9ba5-724145886a53", "content": "The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as an out-of-bounds bug in V8, Chrome's JavaScript and WebAssembly engine. thehackernews.com/2026/09/chro...", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3mv3kyzdopk2j"}, {"timestamp": "2026-09-09T13:03:19.127Z", "date_only": false, "value": "2026-09-09T13:03:19.127113Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "adb57b4d-93ea-47d2-b9af-816d8e9f906c", "content": "Google on Thursday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild.\n\nThe medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as an out-of-bounds bug in V8, Chrome's JavaScript and WebAssembly engine.\n\n\"Out-of-bounds write in V8 in Google Chrome prior to", "url": "https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html"}, {"timestamp": "2026-09-09T13:03:58.150Z", "date_only": false, "value": "2026-09-09T13:03:58.150244Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mv3lxxxwsq25", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "622c465f-2770-4a21-af19-b3ee82a71bf3", "content": "Google patched a second actively exploited Chrome zero-day in under a week. CVE-2026-87491 is an out-of-bounds write in V8, and Google says an exploit exists in the wild. Fixed in Chrome 153.0.8010.36, one of 230 security fixes in the release. bleepingcomputer.com/new...", "url": "https://bsky.app/profile/entorisec.bsky.social/post/3mv3lxxxwsq25"}, {"timestamp": "2026-09-09T13:26:00.298Z", "date_only": false, "value": "2026-09-09T13:26:00.298616Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117241101321399242", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "044bc5e2-bd5a-4c58-91d3-6cda9173ada1", "content": "Google Chrome #zeroday \n\nGoogle is aware that an exploit for CVE-2026-87491 exists in the wild.\nhttps://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html\n#Google #Chrome #CVE", "url": "https://infosec.exchange/ap/users/117202824925377048/statuses/117241101321399242"}, {"timestamp": "2026-09-09T14:47:47.420Z", "date_only": false, "value": "2026-09-09T14:47:47.420304Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mv3rrm6dxi26", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "f0d796d7-03ea-4be1-bc12-348817ada0a3", "content": "Google has released Chrome 153, addressing 230 vulnerabilities, including CVE-2026-87491, a Medium-severity 0-day exploited in the wild. This update includes five Critical vulnerabilities and 43 High-severity bugs across various components.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mv3rrm6dxi26"}, {"timestamp": "2026-09-09T16:00:07.057Z", "date_only": false, "value": "2026-09-09T16:00:07.057991Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/Ju-HZh_HlqYldT-jVZcIoKt0JH9EUFfUXnq5AO9xtmN-xA", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "04fe8ee7-b5f0-4e26-bbf5-169d95a0cc68", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-09T16:18:44.286Z", "date_only": false, "value": "2026-09-09T16:18:44.286858Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mv3wub4ril2h", "record": "cve-2026-87491", "field": "creation_timestamp", "uuid": "5f079ddb-8ee6-4521-87d5-327f1906632d", "content": "\ud83d\udcf0 Google Peringatkan Chrome Zero-Day Baru yang Telah Dieksploitasi dalam Serangan\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/09/google-chrome-zero-day-cve-2026-87491/\n\n#cybersecurity #google #googleChrome #keamanan #keamananSiber #teknologi #vulnerability #zero-day", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mv3wub4ril2h"}, {"timestamp": "2026-09-09T17:15:21.668Z", "date_only": false, "value": "2026-09-09T17:15:21.668593Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mv3zzeqhym2q", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "8d654f4b-09d8-417b-9f62-1c5e060099c8", "content": "\ud83e\udd16 CVE-2026-87491: out-of-bounds write in Chrome's V8 engine, exploited in the wild, enables code execution inside the sandbox. Patched in Google's latest update \u2014 update now.\n\nhttps://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mv3zzeqhym2q"}, {"timestamp": "2026-09-09T17:21:46.066Z", "date_only": false, "value": "2026-09-09T17:21:46.066074Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mv42eybbcs2d", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "bb070f2a-1741-48e1-b760-05b847dc830e", "content": "Just another Tuesday in IT, as Google casually drops Chrome version 153 to fix a staggering 230 security flaws. Desktop browser users are the lucky targets here, suffering through an actively exploited V8 engine out-of-bounds write flaw tracked as CVE-2026-87491. Shielding our wo...\n\nRead full story", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3mv42eybbcs2d"}, {"timestamp": "2026-09-09T17:44:03.796Z", "date_only": false, "value": "2026-09-09T17:44:03.796149Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/volexity.com/post/3mv43lqpz222h", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "1959de2b-febc-45ab-bca8-0df4a0423539", "content": "Earlier this month, Volexity detected multiple Chinese threat actors launching attacks against its customers using chained 0-day exploits in Google Chrome (CVE-2026-85046 & CVE-2026-87491) and Microsoft Windows (CVE-2026-85880). \n\u00a0\n#DFIR #threatintel", "url": "https://bsky.app/profile/volexity.com/post/3mv43lqpz222h"}, {"timestamp": "2026-09-09T17:44:07.726Z", "date_only": false, "value": "2026-09-09T17:44:07.726973Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/volexity/statuses/117242320027691801", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "5f1307e1-6262-4bce-9174-d17171324c08", "content": "Earlier this month, @volexity detected multiple Chinese threat actors launching attacks against its customers using chained 0-day exploits in Google Chrome (CVE-2026-85046 & CVE-2026-87491) and Microsoft Windows (CVE-2026-85880). Volexity observed threat actors it tracks as UTA0560 and JungleBamboo using variations of the same exploits to deliver different malware implants. These implants ranged from a JScript backdoor (GRIMWEDGE) to a fake Google Gemini Chrome extension (LONGTALE).\nRead the full analysis of the exploit chain and post-exploitation tradecraft here: https://www.volexity.com/blog/2026/09/09/mind-the-patch-gap-multiple-chinese-threat-actors-chain-0-day-exploits-in-chrome-windows/ #DFIR #threatintel", "url": "https://infosec.exchange/users/volexity/statuses/117242320027691801"}, {"timestamp": "2026-09-09T18:00:43.771Z", "date_only": false, "value": "2026-09-09T18:00:43.771642Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mv44knqoey2x", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "0afa2b8f-0cb7-409e-be61-779535898aaf", "content": "Chrome 153, falla zero-day gi\u00e0 sfruttata: bisogna aggiornare subito\nGoogle corregge CVE-2026-87491 in Chrome 153: lo zero-day colpisce V8 ed \u00e8 gi\u00e0 sfruttato in attacchi real...\nhttps://www.ilsoftware.it/chrome-153-chiude-zero-day-usato-negli-attacchi/", "url": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mv44knqoey2x"}, {"timestamp": "2026-09-09T19:46:44.787Z", "date_only": false, "value": "2026-09-09T19:46:44.787538Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mv4ciad6er2z", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "a53a4595-f8cf-4907-b677-52b03b652396", "content": "\ud83d\uded1 CVE-2026-87491\nGoogle Chromium V8\nCVSS 8.8 / EPSS 0% / KEV \u2705\nTL;DR: Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacke\u2026\nhttps://cvesentinel.com/report/CVE-2026-87491?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mv4ciad6er2z"}, {"timestamp": "2026-09-09T20:00:04.055Z", "date_only": false, "value": "2026-09-09T20:00:04.055819Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0a37c372-acc3-4022-9d5f-11bdf31cccbc", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "adc5f166-5663-4791-a047-81fe137b8aec", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0a37c372-acc3-4022-9d5f-11bdf31cccbc", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-09T20:03:03.968Z", "date_only": false, "value": "2026-09-09T20:03:03.968947Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ichintu/e8546fe463f1a1319bf313dd9ed691b9", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "022ffa96-6be2-4701-a0e5-58bdbed78e8b", "content": "**September 9, 2026 Cyber Threat Intelligence Summary**\n\nThis briefing highlights multiple critical vulnerabilities with active exploitation, state-sponsored espionage activity, and a major data breach:\n\n* **Actively Exploited Vulnerabilities:** Google Chrome (CVE-2026-87491), ConnectWise ScreenConnect (CVE-2026-84869), and N-able N-central (CVE-2026-86218/86207) are confirmed active in the wild. Chrome and N-able are now listed on CISA\u2019s KEV database. Immediate updates are strongly advised.\n* **Critical & High-Risk Flaws:** Check Point gateways face authentication bypass and RCE; SkillTree has a critical (9.6) stored XSS enabling admin takeover; Fast-DDS suffers a critical out-of-bounds read risking heap memory disclosure and ASLR bypass; Ansible\u2019s memcached plugin allows RCE via insecure deserialization.\n* **Espionage Activity:** The undocumented BlueMoon exploit kit, chaining Chrome and Windows vulnerabilities, is actively deployed by multiple espionage groups, with initial attribution to China-aligned APT31.\n* **Data Breach:** The FBI is investigating the dark web sale of 153 million driver\u2019s license records.\n* **Other Advisories:** MISP requires an immediate patch to fix a sharing group authorization flaw.\n\n**Recommendation:** Prioritize patching Chrome, ConnectWise, N-able, and Check Point systems, remediate exposed critical flaws, and enhance detection for BlueMoon/APT31 activity.", "url": "https://gist.github.com/ichintu/e8546fe463f1a1319bf313dd9ed691b9"}, {"timestamp": "2026-09-09T20:06:36.682Z", "date_only": false, "value": "2026-09-09T20:06:36.682612Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv4dlq7rg52g", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "443aa634-ca1c-4b99-9a33-4b88b7a801d8", "content": "~Cisa~\nCISA added four actively exploited Fortinet, Citrix, Chromium, and Cisco vulnerabilities to its KEV Catalog.\n-\nIOCs: CVE-2025-25249, CVE-2026-19490, CVE-2026-87491\n-\n#CVE #Cybersecurity #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mv4dlq7rg52g"}, {"timestamp": "2026-09-09T20:15:11.493Z", "date_only": false, "value": "2026-09-09T20:15:11.493011Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/google-security-advisory-av26-904", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "12ca1094-81a0-4897-8aa1-a7da4056bc18", "url": "https://cyber.gc.ca/en/alerts-advisories/google-security-advisory-av26-904"}, {"timestamp": "2026-09-09T21:31:35Z", "date_only": false, "value": "2026-09-09T21:31:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8X3P-8G9V-XC7M", "record": "GHSA-8X3P-8G9V-XC7M", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-09T22:36:34.296Z", "date_only": false, "value": "2026-09-09T22:36:34.296587Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/csirts.com/post/3mv4lxv5yxx2i", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "0dc3f8ac-4390-468f-9d6e-687658375a41", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-87491: Google Chromium V8 Out of Bounds Write Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-87491", "url": "https://bsky.app/profile/csirts.com/post/3mv4lxv5yxx2i"}, {"timestamp": "2026-09-10T00:00:41.014Z", "date_only": false, "value": "2026-09-10T00:00:41.014465Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/10010", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "3581d42d-c99c-47d1-8d7b-6d0b2cf0cd05", "content": "\u26a0\ufe0f ALERT - Google patched a new actively exploited Chrome V8 zero-day.\n\nCVE-2026-87491 lets crafted HTML execute arbitrary code inside Chrome\u2019s sandbox. Google has not said how it\u2019s being weaponized or who is behind it.\n\nRead: https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html", "url": "https://t.me/thehackernews/10010", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-10T00:00:41.094Z", "date_only": false, "value": "2026-09-10T00:00:41.094403Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HackerNewscyber/3431", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "b9b62d42-f6cc-4e4b-8114-0acf56861390", "content": "\u2708  \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u06a9\u0631\u0648\u0645 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0641\u0639\u0627\u0644\n\n\u00a9\ufe0f \u06af\u0648\u06af\u0644 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632\u0635\u0641\u0631 \u062f\u0631 \u0645\u0648\u062a\u0648\u0631 V8 \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0631\u0648\u0645 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-87491 \u0631\u0627 \u06a9\u0647 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u060c \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u06cc\u06a9 \u0635\u0641\u062d\u0647 \u0627\u0686\u200c\u062a\u06cc\u200c\u0627\u0645\u200c\u0627\u0644 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062f\u0631 \u0645\u062d\u06cc\u0637 \u0627\u06cc\u0632\u0648\u0644\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u06af\u0648\u06af\u0644 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u06a9\u0631\u0648\u0645\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648 \u06f2\u06f3\u06f0 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u06cc\u06af\u0631 \u0631\u0627 \u0627\u0635\u0644\u0627\u062d \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u06a9\u0631\u062f\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0631\u0627 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "url": "https://t.me/HackerNewscyber/3431", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-10T00:18:20.739Z", "date_only": false, "value": "2026-09-10T00:18:20.739842Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mv4rnv62hr2v", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "4193c463-eb53-4e32-8cb0-b98bf465406e", "content": "CVE-2026-87491 is trending. Hype score 9, currently #6 on cvemon.\n\nOut of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-87491", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mv4rnv62hr2v"}, {"timestamp": "2026-09-10T02:07:07.758Z", "date_only": false, "value": "2026-09-10T02:07:07.758677Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mv4xqfb77d2p", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "0ee3f11b-eceb-46f2-9820-2e02423beebf", "content": "\ud83d\udccc CVE-2026-87491 - Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted... https://www.cyberhub.blog/cves/CVE-2026-87491", "url": "https://bsky.app/profile/cyberhub.blog/post/3mv4xqfb77d2p"}, {"timestamp": "2026-09-10T02:39:38.237Z", "date_only": false, "value": "2026-09-10T02:39:38.237708Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mv4zkjharf2p", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "64c19f82-8125-4891-8914-569f700efe38", "content": "CVE-2026-87491: Chrome V8 Zero-Day Exploited in the Wild Enables Arbitrary Code Execution\n\n", "url": "https://bsky.app/profile/arc-codex.com/post/3mv4zkjharf2p"}, {"timestamp": "2026-09-10T03:55:21.039Z", "date_only": false, "value": "2026-09-10T03:55:21.039385Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-87491", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-09-10T03:55:21.039Z", "date_only": false, "value": "2026-09-10T03:55:21.039385Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-87491", "record": "FKIE_CVE-2026-87491", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-09-10T04:46:09.669Z", "date_only": false, "value": "2026-09-10T04:46:09.669606Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "a32bcc8b-2294-4e4c-8930-1dbfe05a0c8f", "url": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910"}, {"timestamp": "2026-09-10T06:03:48.484Z", "date_only": false, "value": "2026-09-10T06:03:48.484091Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mv5exmpfnv2p", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "1e9b0e06-52c2-4d48-b45f-060f1b31b4ed", "content": "\ud83d\udee1\ufe0f Revue cyber du 10 septembre :\n\ud83d\udd34 Cisco FMC : auth bypass CVE-2026-20079 exploit\u00e9\nhttps://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/\n\ud83d\udfe0 Chrome : 7e zero-day 2026 (CVE-2026-87491)\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1139/", "url": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mv5exmpfnv2p"}, {"timestamp": "2026-09-10T06:25:08.471Z", "date_only": false, "value": "2026-09-10T06:25:08.471953Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mv5g5qh6gs25", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "0e5e9b46-030b-4319-9770-8a6d63e6dc64", "content": "Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)\n\nGoogle has fixed 230 vulnerabilities in Chrome, including a zero-day flaw, CVE-2026-87491, with an in-the-wild exploit. \u201cGoogle is aware that an exploit for CVE-2026-87491 exists in the wild,\u201d the compan\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mv5g5qh6gs25"}, {"timestamp": "2026-09-10T06:36:53.381Z", "date_only": false, "value": "2026-09-10T06:36:53.381474Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mv5gsr2q6j27", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "d2e67184-9abf-4563-b2e2-600470994ec8", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 44 interactions\nCVE-2026-85880: 21 interactions\nCVE-2026-44756: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85880: 20 interactions\nCVE-2026-85046: 17 interactions\nCVE-2026-87491: 16 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mv5gsr2q6j27"}, {"timestamp": "2026-09-10T08:17:59Z", "date_only": false, "value": "2026-09-10T08:17:59+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-87491", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2185e47b-f812-47b3-bbdf-ece52ef1e638", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T08:18:27.953Z", "date_only": false, "value": "2026-09-10T08:18:27.953766Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2185e47b-f812-47b3-bbdf-ece52ef1e638", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "f3e19866-c012-4fa7-a828-faf13923d33c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2185e47b-f812-47b3-bbdf-ece52ef1e638", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-10T10:25:56.873Z", "date_only": false, "value": "2026-09-10T10:25:56.873355Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mv5tlljfyayx", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "af74cc40-5b1d-4849-97f1-4b948a94e2a0", "content": "CISA added Chrome V8 CVE-2026-87491 to its Known Exploited Vulnerabilities catalog. CISA says the exploited out-of-bounds write can allow code execution inside the sandbox via a crafted HTML page. The Hacker News reports Google released Chrome updates addressing it.", "url": "https://bsky.app/profile/shortinfo.bsky.social/post/3mv5tlljfyayx"}, {"timestamp": "2026-09-10T11:31:41.485Z", "date_only": false, "value": "2026-09-10T11:31:41.485680Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mv5xbvi62s2e", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "9b3372d2-ffa3-457a-bfe9-9bdcf72001cb", "content": "\u3010\u7dca\u6025\u3011Google Chrome \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-87491 / CVSS 8.8\uff09\n\n\u7d30\u5de5\u3057\u305f\u30da\u30fc\u30b8\u3092\u958b\u304f\u3060\u3051\u3067\u3001V8\u306e\u5883\u754c\u5916\u66f8\u304d\u8fbc\u307f\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u307e\u3059\u3002\u60aa\u7528\u304c\u5b9f\u5728\u3059\u308b\u3068Google\u304c\u516c\u8868\u3002\n\u5bfe\u51e6: chrome://settings/help \u3092\u958b\u3044\u3066\u66f4\u65b0\u3057\u3001\u518d\u8d77\u52d5\u3002\n\nforsmile.jp/articles/chr...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "url": "https://bsky.app/profile/forsmile.jp/post/3mv5xbvi62s2e"}, {"timestamp": "2026-09-10T15:10:22.496Z", "date_only": false, "value": "2026-09-10T15:10:22.496589Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv6dixfw3z24", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "cd37be4a-21a1-4d22-b6df-70cba2ca46ab", "content": "Chrome zero-day CVE-2026-87491, chained with Windows CVE-2026-85880 by spy groups. Update Chrome to 153.0.8010.36+ and apply September updates. https://bleepingcomputer.com/news/security/new-bluemoon-kit-exploited-windows-and-chrome-zero-day-flaws", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv6dixfw3z24"}, {"timestamp": "2026-09-10T16:45:02.504Z", "date_only": false, "value": "2026-09-10T16:45:02.504533Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.hr/google-je-izdao-zakrpe-za-230-ranjivosti-azurirajte-chrome-preglednik", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "00f5cd07-65c6-4579-a979-f78a3b954dc6", "url": "https://www.cert.hr/google-je-izdao-zakrpe-za-230-ranjivosti-azurirajte-chrome-preglednik"}, {"timestamp": "2026-09-10T19:00:04.914Z", "date_only": false, "value": "2026-09-10T19:00:04.914416Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/20036", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "284cc4c1-8166-4c2c-854b-b8c1394e1090", "content": "\u0412 Google Chrome \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 230 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0443\u044e\u0441\u044f \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 0-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 (CVE-2026-87491). \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\nhttps://xakep.ru/2026/09/10/chrome-7th-0day/", "url": "https://t.me/xakep_ru/20036"}, {"timestamp": "2026-09-10T20:15:48.562Z", "date_only": false, "value": "2026-09-10T20:15:48.562532Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv6ul4agqs27", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "cc5485d4-0722-4354-b2ed-4c0ddd751983", "content": "@proofpoint.com\nFour espionage actors rapidly adopted a Chrome/Windows zero-day exploit chain.\n-\nIOCs: CVE-2026-85046, CVE-2026-87491, ms[.]checrity[.]com\n-\n#APT #ThreatIntel #ZeroDay", "url": "https://bsky.app/profile/cyfar.ca/post/3mv6ul4agqs27"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": true, "value": "2026-09-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1171", "record": "CERTFR-2026-AVI-1171", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-11T00:00:29.474Z", "date_only": false, "value": "2026-09-11T00:00:29.474113Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/20036", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "90b00415-99a0-4d1c-a8ec-83420211dbc2", "content": "\u0412 Google Chrome \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 230 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0443\u044e\u0441\u044f \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 0-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 (CVE-2026-87491). \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\nhttps://xakep.ru/2026/09/10/chrome-7th-0day/", "url": "https://t.me/xakep_ru/20036", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-11T01:00:03.631Z", "date_only": false, "value": "2026-09-11T01:00:03.631753Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/2887", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "38b8f18d-7560-4d92-98ca-df1f97aa5ec5", "content": "Google patched a new actively exploited Chrome V8 zero-day.\n\nCVE-2026-87491 lets crafted HTML execute arbitrary code inside Chrome\u2019s sandbox. Google has not said how it\u2019s being weaponized or who is behind it.", "url": "https://t.me/CyberDispatch/2887"}, {"timestamp": "2026-09-11T05:02:08.453Z", "date_only": false, "value": "2026-09-11T05:02:08.453405Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv7rybixbc2h", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "34174f38-b40f-48af-a9c0-202e51f1f830", "content": "Daily IT Security Digest \u2014 2026-09-11\nproducts.\n\nSources: Bluesky search results (hackread.bsky.social)\n\n---\n\n## 2. Google Chrome 153: 230 Vulnerabilities Fixed, Including Actively Exploited V8 Zero-Day\nGoogle released Chrome 153 fixing 230 vulnerabilities, including CVE-2026-87491 \u2014 a V8 engine", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mv7rybixbc2h"}, {"timestamp": "2026-09-11T06:29:43.914Z", "date_only": false, "value": "2026-09-11T06:29:43.914923Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv7wupmxpk2n", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "fcfb3dd7-0df6-4ca0-a6b3-da34bdd5aca0", "content": "\ud83d\udd34 Chrome zero-day exploited in the wild\n\nCVE-2026-87491 is an out-of-bounds write in V8 that can lead to code execution. It's already the 7th exploited Chrome zero-day of 2026. Update to Chrome 153.\n\nstemshop.top/blog/chrome-...\n\n#CVE #CVE202687491 #Chrome #ZeroDay #V8 #CyberSecurity", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mv7wupmxpk2n"}, {"timestamp": "2026-09-11T06:30:38.047Z", "date_only": false, "value": "2026-09-11T06:30:38.047866Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mv7wwjf54m2g", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "2bd1b084-50ea-407e-81b5-a6063e6e3f00", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-87491: \u26a0\ufe0f CVE-2026-87491: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.8%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-87491-out-of-bounds-write-in-v8", "url": "https://bsky.app/profile/threatspotai.bsky.social/post/3mv7wwjf54m2g"}, {"timestamp": "2026-09-11T10:00:04.908Z", "date_only": false, "value": "2026-09-11T10:00:04.908409Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8598", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "92657f5b-7c16-4d3f-9a2f-e20812a3b810", "content": "\u0421\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 APT-\u0433\u0440\u0443\u043f\u043f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Chrome, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0430\u0442\u0430\u043a\u0438.\n\n\u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f Proofpoint \u0438 Volexity, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043e\u0431\u0449\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Chrome \u0438 Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0436\u0435\u0440\u0442\u0432\u0430 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u0442 \u043f\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435.\n\nProofpoint \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043a\u0430\u043a BlueMoon\u00a0\u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u041a\u0438\u0442\u0430\u0435\u043c \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 TA412, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a JungleBamboo, APT31 \u0438 Violet Typhoon, 28 \u0430\u0432\u0433\u0443\u0441\u0442\u0430.\n\n\u0412 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u043d\u0435\u0439, \u043f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435, \u0442\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0435\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0442\u0443 \u0436\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044f\u0441\u044c \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0421\u0428\u0410 \u0438 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438.\n\nVolexity \u0432 \u0445\u043e\u0434\u0435 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 1 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u044f\u0441\u043d\u0438\u0432, \u0447\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u041a\u0438\u0442\u0430\u0435\u043c \u0433\u0440\u0443\u043f\u043f\u0430, UTA0560, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0442\u043e\u0442 \u0436\u0435 \u043a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430 \u0434\u0440\u0443\u0433\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Chrome, CVE-2026-85046, \u0443\u0436\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 Chromium, \u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0435\u0449\u0435 \u043d\u0435 \u043f\u043e\u043f\u0430\u043b\u043e \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u043a\u0430\u043d\u0430\u043b \u0440\u0435\u043b\u0438\u0437\u043e\u0432 Chrome.\n\n\u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u043b\u043e \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u00ab\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u043c \u0437\u0432\u0435\u043d\u043e\u043c\u00bb: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c, \u043a\u0430\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442, \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Chrome \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0435 \u0438\u043c\u0435\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 V8, \u0434\u0432\u0438\u0436\u043e\u043a JavaScript \u0432 Chrome, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430.\n\n\u0417\u0430\u0442\u0435\u043c \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043e\u0431\u0445\u043e\u0434 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b V8, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 Volexity \u043a\u0430\u043a CVE-2026-87491, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-85880.\n\n\u0412 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043a\u043e\u0434\u0443, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u043c\u0443 \u0432\u043e \u0432\u043a\u043b\u0430\u0434\u043a\u0435 Chrome, \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows.\n\n\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 Windows \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0435\u0451 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 Windows, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 Windows 10, Windows Server 2019 \u0438 2022, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 Windows 11 21H2.\n\nProofpoint \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e BlueMoon \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0441\u044f \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430, \u0430\u0434\u0440\u0435\u0441\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u0433\u043e\u0440\u043d\u043e\u0434\u043e\u0431\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u0438 \u0442\u043e\u0440\u0433\u043e\u0432\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u0430\u044d\u0440\u043e\u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u043c \u0444\u0438\u0440\u043c\u0430\u043c \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c.\n\n\u0412 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u0430\u043b\u0430\u0441\u044c. TA412 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Chrome, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u043f\u043e\u0434 Google Gemini, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 Proofpoint \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442 GemStone, \u0430 Volexity \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a LONGTALE.\n\n\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043d\u0430\u0436\u0430\u0442\u0438\u044f \u043a\u043b\u0430\u0432\u0438\u0448, \u043a\u0440\u0430\u0441\u0442\u044c \u0444\u0430\u0439\u043b\u044b cookie \u0438 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0434\u0435\u043b\u0430\u0442\u044c \u0441\u043d\u0438\u043c\u043a\u0438 \u044d\u043a\u0440\u0430\u043d\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0441\u0432\u043e\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u0412 \u0434\u0440\u0443\u0433\u0438\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0442\u0430 \u0436\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 ShadowPad, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 GRIMWEDGE \u043d\u0430 JScript \u043e\u0442 Volexity.\n\nProofpoint \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0447\u0442\u0438 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 BlueMoon \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0430\u0431\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c, \u0430 \u043d\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043a\u0430\u0436\u0434\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418, \u0445\u043e\u0442\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u0443\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u043d\u0435\u0442.", "url": "https://t.me/true_secator/8598"}, {"timestamp": "2026-09-11T18:00:05.879Z", "date_only": false, "value": "2026-09-11T18:00:05.879044Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8604", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "63352b27-28b9-493a-92f7-24c5c9ef0104", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 0-day \u0432 Chrome. CVE-2026-87491 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8. \u042d\u0442\u043e \u0441\u0435\u0434\u044c\u043c\u0430\u044f 0-day \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n2. IonQ \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u043b\u0443\u0447\u0448\u0438\u0435 \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u0441\u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0438\u0442\u043a\u043e\u0438\u043d\u0430 \u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0437\u0430 26 \u0434\u043d\u0435\u0439.\n\n3. \u0410\u0433\u0435\u043d\u0442\u044b OpenAI, \u0432\u044b\u0440\u0432\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0438\u0437 \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0445 \u0441\u0440\u0435\u0434 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432\u0435\u043b\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0431\u0435\u0441\u0435\u0434\u044b \u043f\u043e\u0447\u0442\u0438 \u043d\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0435 \u0441\u0430\u0439\u0442\u043e\u0432 \u0431\u043e\u043b\u044c\u0448\u0435, \u0447\u0435\u043c \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 GitHub, \u0441\u0430\u0439\u0442\u044b pastebin, \u0441\u0430\u0439\u0442 \u043f\u0440\u0435\u043f\u043e\u0434\u0430\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e \u0445\u0438\u043c\u0438\u0438 AP \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0441\u0441\u044b\u043b\u043e\u043a.\n\n4. \u0425\u0430\u043a\u0435\u0440\u044b \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432 Trezor \u0438 \u0440\u0430\u0437\u043e\u0441\u043b\u0430\u043b\u0438 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n5. GitLab \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 - CVE-2026-85706. \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0443\u0442\u0438 \u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0432 API \u0434\u043b\u044f \u0444\u0438\u043a\u0441\u0430\u0446\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u00ab\u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445\u00bb. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, GitLab \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432\u0442\u043e\u0440\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e CVE-2026-87719, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0432 GraphQL.\n\n6. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u0437\u043b\u043e\u043c\u0430\u043b Deep-Live-Cam, \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0437\u0430\u043c\u0435\u043d\u044b \u043b\u0438\u0446 \u043d\u0430 Python \u0441 96 600 \u0437\u0432\u0435\u0437\u0434\u0430\u043c\u0438 \u043d\u0430 GitHub. \u041e\u043d \u0438\u0437\u043c\u0435\u043d\u0438\u043b \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0431\u0443\u0444\u0435\u0440\u0430 \u043e\u0431\u043c\u0435\u043d\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u0434\u043b\u044f Windows \u0438 macOS. \u0412\u0437\u043b\u043e\u043c \u0434\u043b\u0438\u043b\u0441\u044f \u0432\u0441\u0435\u0433\u043e \u0434\u0435\u0432\u044f\u0442\u044c \u0447\u0430\u0441\u043e\u0432.\n\n7. Apple \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u0443\u043c\u043d\u044b\u0445 \u0447\u0430\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0441\u043d\u0430\u0449\u0435\u043d\u044b \u0436\u0443\u0442\u043a\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043f\u043e\u0434\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u043e\u043a\u0440\u0443\u0433 \u0432 \u043b\u044e\u0431\u043e\u0435 \u0432\u0440\u0435\u043c\u044f, \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u044b, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u0445 \u0434\u043b\u044f \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f, \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0437\u0430\u0434\u0430\u0447.\n\n8. LG \u0432\u0441\u044f\u0447\u0435\u0441\u043a\u0438 \u043e\u043f\u0440\u043e\u0432\u0435\u0440\u0433\u0430\u0435\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u043c\u0430\u0440\u0442-\u0442\u0435\u043b\u0435\u0432\u0438\u0437\u043e\u0440\u044b \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\u0445. \u0412\u0435\u0440\u0438\u043c.\n\n9. Anthropic \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441\u043b\u0435\u0436\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043b\u0438\u0446 \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0441\u0442\u043e\u0432, \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0442\u0438\u0432 \u0418\u0418 \u0438 \u0426\u041e\u0414\u043e\u0432.\n\n10. \u0425\u0430\u043a\u0435\u0440\u044b \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 F5 BIG-IP APM \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0440\u0443\u0442\u043a\u0438\u0442\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 PHP-\u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443 \u0431\u0435\u0437 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043f\u0430\u043c\u044f\u0442\u044c, \u0438\u0437\u0431\u0435\u0433\u0430\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0434\u0438\u0441\u043a.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0432\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u0430\u0434\u0438\u0438 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u044b\u043b\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u0430 \u043f\u043e\u0441\u043b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2025-53521, \u043a\u043e\u0442\u043e\u0440\u0443\u044e\u00a0\u0432 \u043c\u0430\u0440\u0442\u0435 \u043f\u0435\u0440\u0435\u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0438\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b DoS \u0432 RCE.\n\nSophos \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043e\u0431\u0440\u0430\u0437\u0435\u0446 \u0438 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0430, \u0447\u0442\u043e \u0442\u043e\u0442 \u0436\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u044b\u043b \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d ESET, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0435\u0433\u043e \u043a\u0430\u043a PoisonedRefresh.\n\n11. Check Point \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u0430\u043d\u0430\u043b, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0441\u0441\u0438\u0438 ChatGPT \u043f\u043e\u0434 \u043e\u0434\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0437\u0430\u0434\u0430\u0447\u0438 \u0432 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e \u043f\u043e\u0434 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e. \u0418 \u044d\u0442\u043e \u043d\u0435 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u0442\u0441\u044f \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0438 \u043d\u0438 \u043e\u0434\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438. [\u00a0Check Point\u00a0]\n\n12. Onapsis \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0435\u0442\u044b \u043e \u0434\u0432\u0443\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 SAP: OVERPASS - \u044d\u0442\u043e RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u044f\u0434\u0440\u0435 SAP (CVE-2026-44756) \u0438 S4GET - \u044d\u0442\u043e RCE \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 SAP NetWeaver (CVE-2026-58240). \u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043c\u0435\u044e\u0442 \u043e\u0447\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSS \u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u0443\u0434\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n13. Adobe \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 0-day StyleSmuggler, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043d\u0430 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b Magento \u0438 Adobe Commerce. \u0422\u0435\u043f\u0435\u0440\u044c \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-75650.\n\n14. N-able \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 0-day \u0432 N-central - CVE-2026-86218, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u0434\u0432\u0443\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432 \u043f\u0440\u043e\u0448\u043b\u0443\u044e \u043f\u044f\u0442\u043d\u0438\u0446\u0443. \u0420\u0430\u043d\u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f N-central \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c 0-day \u0430\u0442\u0430\u043a\u0430\u043c.", "url": "https://t.me/true_secator/8604"}, {"timestamp": "2026-09-12T00:00:56.646Z", "date_only": false, "value": "2026-09-12T00:00:56.646377Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberDispatch/2887", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "1db2f926-181b-496c-a54f-9dc149898962", "content": "Google patched a new actively exploited Chrome V8 zero-day.\n\nCVE-2026-87491 lets crafted HTML execute arbitrary code inside Chrome\u2019s sandbox. Google has not said how it\u2019s being weaponized or who is behind it.", "url": "https://t.me/CyberDispatch/2887", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-13T22:00:00Z", "date_only": false, "value": "2026-09-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-14T00:00:00Z", "date_only": false, "value": "2026-09-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1171", "record": "CERTFR-2026-AVI-1171", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-09-14T00:00:00Z", "date_only": false, "value": "2026-09-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1171", "record": "CERTFR-2026-AVI-1171", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-14T00:00:00Z", "date_only": false, "value": "2026-09-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1171", "record": "CERTFR-2026-AVI-1171", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-09-14T10:00:06.231Z", "date_only": false, "value": "2026-09-14T10:00:06.231794Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/6599", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "43e340d5-379b-4863-90a0-7df587150175", "content": "\u0421\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 APT-\u0433\u0440\u0443\u043f\u043f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Chrome, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0430\u0442\u0430\u043a\u0438.\n\n\u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f Proofpoint \u0438 Volexity, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043e\u0431\u0449\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Chrome \u0438 Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0436\u0435\u0440\u0442\u0432\u0430 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u0442 \u043f\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435.\n\nProofpoint \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043a\u0430\u043a BlueMoon\u00a0\u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u041a\u0438\u0442\u0430\u0435\u043c \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 TA412, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a JungleBamboo, APT31 \u0438 Violet Typhoon, 28 \u0430\u0432\u0433\u0443\u0441\u0442\u0430.\n\n\u0412 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u043d\u0435\u0439, \u043f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435, \u0442\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0435\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0442\u0443 \u0436\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044f\u0441\u044c \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0421\u0428\u0410 \u0438 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438.\n\nVolexity \u0432 \u0445\u043e\u0434\u0435 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 1 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u044f\u0441\u043d\u0438\u0432, \u0447\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u041a\u0438\u0442\u0430\u0435\u043c \u0433\u0440\u0443\u043f\u043f\u0430, UTA0560, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0442\u043e\u0442 \u0436\u0435 \u043a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430 \u0434\u0440\u0443\u0433\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Chrome, CVE-2026-85046, \u0443\u0436\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 Chromium, \u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0435\u0449\u0435 \u043d\u0435 \u043f\u043e\u043f\u0430\u043b\u043e \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u043a\u0430\u043d\u0430\u043b \u0440\u0435\u043b\u0438\u0437\u043e\u0432 Chrome.\n\n\u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u043b\u043e \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u00ab\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u043c \u0437\u0432\u0435\u043d\u043e\u043c\u00bb: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c, \u043a\u0430\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442, \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Chrome \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0435 \u0438\u043c\u0435\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 V8, \u0434\u0432\u0438\u0436\u043e\u043a JavaScript \u0432 Chrome, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430.\n\n\u0417\u0430\u0442\u0435\u043c \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043e\u0431\u0445\u043e\u0434 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b V8, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 Volexity \u043a\u0430\u043a CVE-2026-87491, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Windows, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-85880.\n\n\u0412 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043a\u043e\u0434\u0443, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u043c\u0443 \u0432\u043e \u0432\u043a\u043b\u0430\u0434\u043a\u0435 Chrome, \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows.\n\n\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 Windows \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0435\u0451 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 Windows, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 Windows 10, Windows Server 2019 \u0438 2022, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 Windows 11 21H2.\n\nProofpoint \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e BlueMoon \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0441\u044f \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430, \u0430\u0434\u0440\u0435\u0441\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u0433\u043e\u0440\u043d\u043e\u0434\u043e\u0431\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u0438 \u0442\u043e\u0440\u0433\u043e\u0432\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u0430\u044d\u0440\u043e\u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u043c \u0444\u0438\u0440\u043c\u0430\u043c \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c.\n\n\u0412 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u0430\u043b\u0430\u0441\u044c. TA412 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Chrome, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u043f\u043e\u0434 Google Gemini, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 Proofpoint \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442 GemStone, \u0430 Volexity \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a LONGTALE.\n\n\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043d\u0430\u0436\u0430\u0442\u0438\u044f \u043a\u043b\u0430\u0432\u0438\u0448, \u043a\u0440\u0430\u0441\u0442\u044c \u0444\u0430\u0439\u043b\u044b cookie \u0438 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0434\u0435\u043b\u0430\u0442\u044c \u0441\u043d\u0438\u043c\u043a\u0438 \u044d\u043a\u0440\u0430\u043d\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0441\u0432\u043e\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u0412 \u0434\u0440\u0443\u0433\u0438\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0442\u0430 \u0436\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 ShadowPad, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 GRIMWEDGE \u043d\u0430 JScript \u043e\u0442 Volexity.\n\nProofpoint \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0447\u0442\u0438 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 BlueMoon \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0430\u0431\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c, \u0430 \u043d\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043a\u0430\u0436\u0434\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418, \u0445\u043e\u0442\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u0443\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u043d\u0435\u0442.", "url": "https://t.me/S_E_Reborn/6599", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T15:48:57.820Z", "date_only": false, "value": "2026-09-14T15:48:57.820389Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedroptimes.bsky.social/post/3mvihjmo7gx2h", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "d3530f2d-fd9c-4bb9-9689-8373da2c655e", "content": "Chrome 153 starts Google\u2019s two-week major release cycle with 230 security fixes. Google also confirms active exploitation of CVE-2026-87491 in V8. Drupal teams now face a faster browser-testing cadence.\n\nhttps://bit.ly/4yA5Snc \n\n#Drupal #Chrome #WebSecurity #WebDevelopment", "url": "https://bsky.app/profile/thedroptimes.bsky.social/post/3mvihjmo7gx2h"}, {"timestamp": "2026-09-14T22:00:00Z", "date_only": false, "value": "2026-09-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-09-15T11:07:24.141Z", "date_only": false, "value": "2026-09-15T11:07:24.141228Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvkib3uoi72v", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "48b64027-5c82-4266-8792-69d03d835c7d", "content": "Chrome+Windows zero-day chain (CVE-2026-85046, CVE-2026-87491, CVE-2026-85880) has backdoored NGOs since 1 Sept per Volexity. Update Chrome and Windows now. https://thehackernews.com/2026/09/china-linked-hackers-exploit-chrome.html", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvkib3uoi72v"}, {"timestamp": "2026-09-15T15:00:05.309Z", "date_only": false, "value": "2026-09-15T15:00:05.309760Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3449", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "4ca3736b-1b9c-40ec-85b7-f0af8108c1fd", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 JavaScript-\u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b\n\nBDU:2026-14454\nCVE-2026-87491\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html", "url": "https://t.me/bdufstecru/3449"}, {"timestamp": "2026-09-15T22:00:05.246Z", "date_only": false, "value": "2026-09-15T22:00:05.246384Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/102430", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "d499ac3e-4535-4c63-96de-7aa785f3e0e3", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 20:05:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102430"}, {"timestamp": "2026-09-16T00:00:10.405Z", "date_only": false, "value": "2026-09-16T00:00:10.405460Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102430", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "725c5b83-ded3-45b9-b1bc-578667986fac", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 20:05:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102430", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T04:46:29.120Z", "date_only": false, "value": "2026-09-16T04:46:29.120093Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260916", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "7a9243f9-12a8-406e-b641-ca4180f59729", "url": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260916"}, {"timestamp": "2026-09-16T08:15:10Z", "date_only": false, "value": "2026-09-16T08:15:10Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21858-1", "record": "OPENSUSE-SU-2026:21858-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-09-16T08:15:10Z", "date_only": false, "value": "2026-09-16T08:15:10Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21858-1", "record": "OPENSUSE-SU-2026:21858-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-09-16T08:15:10Z", "date_only": false, "value": "2026-09-16T08:15:10Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21858-1", "record": "OPENSUSE-SU-2026:21858-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2026-09-16T08:15:10Z", "date_only": false, "value": "2026-09-16T08:15:10Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21858-1", "record": "OPENSUSE-SU-2026:21858-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-16T08:45:01.822Z", "date_only": false, "value": "2026-09-16T08:45:01.822489Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-72", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "233f3ccc-19e4-4457-81fb-12b24e886f51", "url": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-72"}, {"timestamp": "2026-09-16T20:28:05Z", "date_only": false, "value": "2026-09-16T20:28:05Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-16T21:30:43Z", "date_only": false, "value": "2026-09-16T21:30:43Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-09-16T22:00:00Z", "date_only": false, "value": "2026-09-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-09-17T17:24:03Z", "date_only": false, "value": "2026-09-17T17:24:03Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-09-17T17:24:03Z", "date_only": false, "value": "2026-09-17T17:24:03Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11750-1", "record": "OPENSUSE-SU-2026:11750-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-17T17:44:45Z", "date_only": false, "value": "2026-09-17T17:44:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21858-1", "record": "OPENSUSE-SU-2026:21858-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-17T17:44:45Z", "date_only": false, "value": "2026-09-17T17:44:45Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21858-1", "record": "OPENSUSE-SU-2026:21858-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-17T22:00:00Z", "date_only": false, "value": "2026-09-17T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-09-20T05:23:04Z", "date_only": false, "value": "2026-09-20T05:23:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21921-1", "record": "OPENSUSE-SU-2026:21921-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-09-20T22:00:00Z", "date_only": false, "value": "2026-09-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2026-09-21T12:51:58.334Z", "date_only": false, "value": "2026-09-21T12:51:58.334Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-87491", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-21T12:51:58.334Z", "date_only": false, "value": "2026-09-21T12:51:58.334Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-87491", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-21T13:17:11.283Z", "date_only": false, "value": "2026-09-21T13:17:11.283", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-87491", "record": "FKIE_CVE-2026-87491", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-21T21:08:27.078Z", "date_only": false, "value": "2026-09-21T21:08:27.078954Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/volexity/statuses/117311072118405509", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "9646a979-3f74-4592-8689-76fca034042a", "content": "Following @volexity\u2019s September 9 blog post on two Chinese APT actors chaining 0-days in Chrome (CVE-2026-85046, CVE-2026-87491) & Windows (CVE-2026-85880), Volexity discovered another threat actor, UTA0565, had been using the same exploits on Sept 3-4, 2026, while they were still unpatched. UTA0565 used multiple fake websites, posing as media organizations and an NGO, to run a more customized version of the exploit framework than previously documented instances. The payload delivered was a new custom malware family, CLEANGULP, obfuscated using control flow flattening. Full details and IOCs can be found here: https://www.volexity.com/blog/2026/09/21/mind-the-patch-gap-part-2-fake-websites-used-to-deploy-chrome-windows-0-day-exploits/ #DFIR #threatintel", "url": "https://infosec.exchange/users/volexity/statuses/117311072118405509"}, {"timestamp": "2026-09-21T21:13:42.965Z", "date_only": false, "value": "2026-09-21T21:13:42.965844Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/volexity.com/post/3mw2mwppzsc2a", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "0dcfbff2-b525-4b47-a89c-91cbebcd439c", "content": "Following our Sept 9 blog on two Chinese APT actors chaining 0-days in Chrome (CVE-2026-85046, CVE-2026-87491) & Windows (CVE-2026-85880), Volexity found a third actor, UTA0565 using the same exploits Sept 3-4, while they were still unpatched.", "url": "https://bsky.app/profile/volexity.com/post/3mw2mwppzsc2a"}, {"timestamp": "2026-09-21T21:13:43.559Z", "date_only": false, "value": "2026-09-21T21:13:43.559520Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/volexity.com/post/3mw2mwrbgu22a", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "048199bf-94ad-4003-936a-30dfccf2809a", "content": "Following our Sept 9 blog on two Chinese APT actors chaining 0-days in Chrome (CVE-2026-85046, CVE-2026-87491) & Windows (CVE-2026-85880), Volexity found a third actor, UTA0565 using the same exploits Sept 3-4, while they were still unpatched.", "url": "https://bsky.app/profile/volexity.com/post/3mw2mwrbgu22a"}, {"timestamp": "2026-09-22T06:44:41.614Z", "date_only": false, "value": "2026-09-22T06:44:41.614825Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mw3mtrjgoo2v", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "b920ca49-b799-4f26-8f92-0858e7bdba2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 27 interactions\nCVE-2026-76460: 22 interactions\nCVE-2026-58704: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85046: 8 interactions\nCVE-2026-85880: 8 interactions\nCVE-2026-87491: 8 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mw3mtrjgoo2v"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": true, "value": "2026-09-23", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "evidence.0.details.due_date", "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-23T10:00:52.243Z", "date_only": false, "value": "2026-09-23T10:00:52.243466Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "69d73fd9-068c-48d7-b6b9-606e5e8a19e7", "content": "A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites.\n\nThe attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome (CVE-2026-85046, CVE-2026-87491) and one impacting Windows Advanced Local Procedure Call (CVE-2026-85880) to break", "url": "https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html"}, {"timestamp": "2026-09-23T11:16:39.082Z", "date_only": false, "value": "2026-09-23T11:16:39.082917Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mw6miyj5mf2f", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "86b8fc4d-d3de-4f60-9e42-b94733993468", "content": "\ud83e\udd16 Chinese threat actor UTA0565 chained Chrome (CVE-2026-85046, CVE-2026-87491) and Windows ALPC (CVE-2026-85880) zero-days via fake sites to deploy CLEANGULP malware.\nhttps://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mw6miyj5mf2f"}, {"timestamp": "2026-09-23T12:38:43.965Z", "date_only": false, "value": "2026-09-23T12:38:43.965066Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybergeodigest.bsky.social/post/3mw6r3r34zu2p", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "bb38e8ac-57fd-448e-b0d4-5a74958d237a", "content": "Today's CyberGeoDigest \u2014 20 stories\n\nTop: UTA0565 Chains CVE-2026-85046, CVE-2026-87491, CVE-2026-85880 to Drop CLEANGULP\n\n#APT #ThreatIntel #CyberSecurity", "url": "https://bsky.app/profile/cybergeodigest.bsky.social/post/3mw6r3r34zu2p"}, {"timestamp": "2026-09-23T16:04:47Z", "date_only": false, "value": "2026-09-23T16:04:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/dr-VTIf0y0-piLzHX9OaH2cRKRIq9yIESs9l0HfnzF0DhA", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "dc07a405-ac7e-48c8-aa96-25e076bac16e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-23T16:04:47Z", "date_only": false, "value": "2026-09-23T16:04:47.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/dr-VTIf0y0-piLzHX9OaH2cRKRIq9yIESs9l0HfnzF0DhA", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "1e148648-76d7-4afa-bbef-8fe94868cba1"}, {"timestamp": "2026-09-24T03:13:24Z", "date_only": false, "value": "2026-09-24T03:13:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1ys77DIZO-GDJM12Y2kKkFL_LlZmH_iXH3Qq1ObYEEV1_pg", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "1df2c630-adcb-41a8-9971-858e89bf0364", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-24T17:48:22Z", "date_only": false, "value": "2026-09-24T17:48:22Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21921-1", "record": "OPENSUSE-SU-2026:21921-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-25T09:24:45Z", "date_only": false, "value": "2026-09-25T09:24:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cPnUkNDrzhC9sIWTfymlxK1szwNDW4bVEFI53yswT2mFGHU", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "2ac47bf8-6b6b-4154-8bfb-d3f92847b975", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T09:24:45Z", "date_only": false, "value": "2026-09-25T09:24:45.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cPnUkNDrzhC9sIWTfymlxK1szwNDW4bVEFI53yswT2mFGHU", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "49c73e35-f6c9-43a8-bcb7-8208bfb20c70"}, {"timestamp": "2026-09-27T22:00:00Z", "date_only": false, "value": "2026-09-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.6.date", "linked_record": true}, {"timestamp": "2026-09-28T03:33:43.181Z", "date_only": false, "value": "2026-09-28T03:33:43.181335Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mwkexsv2r423", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "9ae6b29b-8a8d-4841-8520-531279affe96", "content": "A Chinese threat actor, UTA0565, exploited Chrome and Windows zero-days via fake sites on Sept 3-4, 2026, chaining CVE-2026-85046, CVE-2026-87491, and CVE-2026-85880. Stay alert!", "url": "https://bsky.app/profile/technoholic.bsky.social/post/3mwkexsv2r423"}, {"timestamp": "2026-09-28T17:19:13.157Z", "date_only": false, "value": "2026-09-28T17:19:13.157311Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/volexity/statuses/117349807010597266", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "5b1311a7-5207-4885-85ed-ca8ce845a76f", "content": "A vulnerability can be patched and still be a zero-day for millions of users. Volexity co-founder and president Steven Adair will deliver the keynote at our upcoming Volexity Cyber Sessions in Amsterdam (October 29) on multiple cases from September 2026, when Volexity uncovered three distinct Chinese threat actors exploiting Chrome (CVE-2026-85046, CVE-2026-87491) and Windows (CVE-2026-85880) vulnerabilities. The Chrome vulnerabilities had already been fixed upstream in Chromium\u2014but hadn't yet reached a public Chrome release\u2014potentially allowing the threat actors to compromise fully up-to-date users. The identical exploit code reused across otherwise unrelated operations points to a shared supplier. Steven will reconstruct these campaigns, tracing the exploit from upstream patch to active deployment and examining the evidence linking the operators despite their different infrastructure, targeting, and tooling, including a false-flag campaign designed to pin the blame on a Russian threat actor. The talk covers what this reveals about exploit supply chains, the risks created by the patch gap, and the attribution challenges posed when capabilities are shared between threat actors.\nSeating is limited. Register now to secure your spot: https://luma.com/0qtkw49c\n#dfir #threatintel", "url": "https://infosec.exchange/users/volexity/statuses/117349807010597266"}, {"timestamp": "2026-10-01T10:23:15Z", "date_only": false, "value": "2026-10-01T10:23:15Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21921-1", "record": "OPENSUSE-SU-2026:21921-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-10-05T06:27:38.933Z", "date_only": false, "value": "2026-10-05T06:27:38.933782Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/achai.bark.how/post/3mx4bxavehk26", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "6e7ed340-e9f1-4460-bae6-de59f6bdade1", "content": "CVE-2026-87491\nCVE-2026-85046\nCVE-2026-17989\nCVE-2026-19556", "url": "https://bsky.app/profile/achai.bark.how/post/3mx4bxavehk26"}, {"timestamp": "2026-10-08T17:58:32.919Z", "date_only": false, "value": "2026-10-08T17:58:32.919374Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mxezxhc7ee2d", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "c8dcba7d-6d7b-4bc1-8ab2-3a03c2afcc85", "content": "How BlueMoon Exploits Chrome CVE-2026-85046 and CVE-2026-87491 https://packetstorm.news/news/view/45030 #news", "url": "https://bsky.app/profile/packetstorm.bsky.social/post/3mxezxhc7ee2d"}, {"timestamp": "2026-10-11T01:51:04.353Z", "date_only": false, "value": "2026-10-11T01:51:04.353707Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mxkvc5oa4c2f", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "e33ca1e9-9ed5-4748-95f6-061ed42a77c1", "content": "Google\u304c2026\u5e74\u306b\u60aa\u7528\u3055\u308c\u305f7\u756a\u76ee\u306eChrome\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nGoogle\u306f\u3001230\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3059\u308bChrome\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u305d\u306e\u4e2d\u306b\u306f\u3001\u65e2\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u8106\u5f31\u6027\uff08CVE-2026-87491\u3001CVSS\u30b9\u30b3\u30a28.8\uff09\u3082\u542b\u307e\u308c\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u4e2d\u7a0b\u5ea6\u306e\u6df1\u523b\u5ea6\u306e\u8106\u5f31\u6027\u306f\u3001Google\u306e\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u9ad8\u6027\u80fdJavaScript\u304a\u3088\u3073WebAssembly\u30a8\u30f3\u30b8\u30f3\u3067\u3042\u308bV8\u3068\u3001Chrome\u306eJavaScript\u304a\u3088\u3073WebAssembly\u30a8\u30f3\u30b8\u30f3\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u307e\u3059\u3002\n\n\u653b\u6483\u8005\u306f\u3001\u7279\u5225\u306b\u7d30\u5de5\u3055\u308c\u305fHTML\u30da\u30fc\u30b8\u3092\u4ecb\u3057\u3066\u5883\u754c\u5916\u66f8\u304d\u8fbc\u307f\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mxkvc5oa4c2f"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1326", "record": "CERTFR-2026-AVI-1326", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-10-14T21:00:00Z", "date_only": false, "value": "2026-10-14T21:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2111", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "d38ae421-23df-46e5-ae4a-752488788e80", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2111"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1326", "record": "CERTFR-2026-AVI-1326", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1326", "record": "CERTFR-2026-AVI-1326", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1326", "record": "CERTFR-2026-AVI-1326", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-10-18T22:00:00Z", "date_only": false, "value": "2026-10-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.7.date", "linked_record": true}, {"timestamp": "2026-10-19T22:00:00Z", "date_only": false, "value": "2026-10-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.8.date", "linked_record": true}, {"timestamp": "2026-10-20T22:00:00Z", "date_only": false, "value": "2026-10-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.9.date", "linked_record": true}, {"timestamp": "2026-10-21T22:00:00Z", "date_only": false, "value": "2026-10-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.10.date", "linked_record": true}, {"timestamp": "2026-10-28T07:48:31Z", "date_only": false, "value": "2026-10-28T07:48:31Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21921-1", "record": "OPENSUSE-SU-2026:21921-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-28T07:48:31Z", "date_only": false, "value": "2026-10-28T07:48:31Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21921-1", "record": "OPENSUSE-SU-2026:21921-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2026-10-28T07:48:31Z", "date_only": false, "value": "2026-10-28T07:48:31Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21921-1", "record": "OPENSUSE-SU-2026:21921-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T17:19:14Z", "date_only": false, "value": "2026-10-31T17:19:14Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21921-1", "record": "OPENSUSE-SU-2026:21921-1", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-11-03T16:09:23Z", "date_only": false, "value": "2026-11-03T16:09:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/mrcointreau/f5d7de316059888275a16060ce02157a", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "f688f551-0c68-4c58-b857-abe448c84a1c", "content": "#!/usr/bin/env bash\n#\n# playwright-chrome-audit.sh\n#\n# Finds every Playwright install and every Chromium-family browser it can see\n# on this machine, and checks each browser against the current Chrome release.\n#\n# Works on macOS and Linux with nothing to install (bash 3.2+, curl).\n#\n#   bash playwright-chrome-audit.sh              # home folder + system locations\n#   bash playwright-chrome-audit.sh --quick      # browser caches only, in seconds\n#   bash playwright-chrome-audit.sh --all        # the whole disk\n#   bash playwright-chrome-audit.sh ~/work /data # also search these folders\n#   sudo bash playwright-chrome-audit.sh --all   # include other users\n#\n# It is read-only: it deletes and changes nothing, and it never runs a browser\n# or anything else it finds. Versions are read from the files themselves.\n#\n# How a browser is judged:\n#   VULNERABLE  older than a fix listed in KNOWN_FIXES below\n#   OUTDATED    newer than those, but behind today's Chrome stable\n#   PRERELEASE  a frozen pre-release build, so its fixes cannot be confirmed\n#   OK          at Chrome stable or ahead, or a self-updating beta or canary\n#   UNKNOWN     its version could not be read\n#\n# \"Chrome stable\" comes live from Google's Chrome for Testing feed, so the\n# script stays useful without edits. KNOWN_FIXES adds detail, and is the\n# fallback when the feed cannot be reached.\n#\n# Exit codes:\n#   0   nothing needs attention\n#   1   a vulnerable or outdated browser was found\n#   2   nothing known to be bad, but the run could not confirm everything\n#   64  bad arguments\n\n[ -n \"${BASH_VERSION:-}\" ] || exec bash \"$0\" \"$@\"\nset +o posix 2>/dev/null\nexport LC_ALL=C\n\n# ---- Update these when new Chrome fixes matter --------------------------------\nBASELINE_DATE=2026-11-03\n# fixed-in version | kind (exploited, critical, macos) | what is missing\nKNOWN_FIXES=(\n  \"152.0.7977.82|exploited|CVE-2026-85046\"\n  \"153.0.8010.36|exploited|CVE-2026-87491\"\n  \"155.0.8059.39|macos|CVE-2026-106378 (sandbox escape)\"\n  \"156.0.8078.47|critical|CVE-2026-113303\"\n  \"156.0.8078.73|critical|CVE-2026-118306 (sandbox escape)\"\n  \"156.0.8078.79|critical|CVE-2026-76024\"\n)\n# -------------------------------------------------------------------------------\n\nCFT_URL=https://googlechromelabs.github.io/chrome-for-testing/last-known-good-versions.json\nNPM_URL=https://registry.npmjs.org/playwright-core/latest\nPW_RAW=https://raw.githubusercontent.com/microsoft/playwright\n\nMODE=default OFFLINE=0 QUIET=0 MIN_VERSION='' INCOMPLETE=0\nEXTRA_ROOTS=()\nROOTS=()\n\nusage() {\n  cat <<'EOF'\nUsage: playwright-chrome-audit.sh [options] [folder ...]\n\n  --quick             Only look in browser caches and what they point to\n  --all               Search the whole disk (slow). External drives are skipped;\n                      name them as folders to include them\n  --min-version VER   Treat VER and newer as OK. This replaces every other check,\n                      including the list of known bugs\n  --offline           No network; compare against the built-in list only\n  --quiet             Only print problems and the result\n  -h, --help          Show this help\n\nFolders given as arguments are searched as well.\nExit codes: 0 clean, 1 vulnerable or outdated, 2 could not confirm everything,\n64 bad arguments.\nEOF\n}\n\nwhile [ $# -gt 0 ]; do\n  case $1 in\n    --quick) MODE=quick ;;\n    --all) MODE=all ;;\n    --offline) OFFLINE=1 ;;\n    --quiet | -q) QUIET=1 ;;\n    --min-version)\n      [ $# -ge 2 ] || { echo \"--min-version needs a version\" >&2; exit 64; }\n      MIN_VERSION=$2; shift ;;\n    --min-version=*) MIN_VERSION=${1#*=} ;;\n    -h | --help) usage; exit 0 ;;\n    -*) echo \"Unknown option: $1 (try --help)\" >&2; exit 64 ;;\n    *)\n      [ -d \"$1\" ] || { echo \"Not a folder: $1\" >&2; exit 64; }\n      dir=${1%/}\n      dir=${dir:-/}\n      case $dir in\n        # The search skips folders with these names, so start from their contents.\n        */Library/CloudStorage | */Library/Mobile\\ Documents) EXTRA_ROOTS+=(\"$dir\"/*) ;;\n        *) EXTRA_ROOTS+=(\"$dir\") ;;\n      esac ;;\n  esac\n  shift\ndone\n\nOS=$(uname -s)\nIS_ROOT=0\n[ \"$(id -u)\" != 0 ] || IS_ROOT=1\nT=$(mktemp -d \"${TMPDIR:-/tmp}/pw-audit.XXXXXX\") || { echo \"Cannot create a temp folder\" >&2; exit 2; }\ntrap 'rm -rf \"$T\"' EXIT\nSEP=$'\\037'\n: >\"$T/apps\"; : >\"$T/bins\"; : >\"$T/pkgdirs\"; : >\"$T/archives\"; : >\"$T/limits\"\n: >\"$T/browsers\"; : >\"$T/packages\"; : >\"$T/revmap\"; : >\"$T/disk_revs\"; : >\"$T/images\"\n\nif [ -t 1 ] && [ -z \"${NO_COLOR:-}\" ]; then\n  C_RED=$'\\033[31m' C_YEL=$'\\033[33m' C_GRN=$'\\033[32m' C_BLD=$'\\033[1m' C_DIM=$'\\033[2m' C_OFF=$'\\033[0m'\nelse\n  C_RED='' C_YEL='' C_GRN='' C_BLD='' C_DIM='' C_OFF=''\nfi\n\nheading() { printf '\\n%s%s%s\\n' \"$C_BLD\" \"$1\" \"$C_OFF\"; }\nnote() { [ \"$QUIET\" = 1 ] || printf '%s\\n' \"$1\"; }\n\n# Something this run did not cover. incomplete() also rules out a clean result.\nlimit() { printf '  %s\\n' \"$1\" >>\"$T/limits\"; }\nincomplete() { INCOMPLETE=1; limit \"$1\"; }\n\n# Drops control characters, so a crafted package or folder name cannot rewrite\n# the report or shift its columns.\nclean() { tr -d '\\000-\\011\\013-\\037\\177'; }\n\n# ---- Versions -----------------------------------------------------------------\n\nis_version() {\n  case $1 in '' | *[!0-9.]* | .* | *. | *..*) return 1 ;; esac\n  case $1 in *.*.*.*) return 0 ;; esac\n  return 1\n}\n\n# True when version $1 is older than version $2.\nver_lt() {\n  local IFS=. i x y\n  local -a a b\n  # shellcheck disable=SC2206  # splitting on dots is the point\n  a=($1) b=($2)\n  for i in 0 1 2 3; do\n    x=${a[i]:-0} y=${b[i]:-0}\n    [ \"$((10#$x))\" -lt \"$((10#$y))\" ] && return 0\n    [ \"$((10#$x))\" -gt \"$((10#$y))\" ] && return 1\n  done\n  return 1\n}\n\nmajor() { printf '%s' \"${1%%.*}\"; }\n\n# Chrome ships pairs such as .79/.80 for the same code. Treat the lower as equal.\nsame_release() {\n  [ \"${1%.*}\" = \"${2%.*}\" ] && [ \"$((10#${1##*.} + 1))\" -ge \"$((10#${2##*.}))\" ]\n}\n\nbaseline() {\n  local row fixed rest kind best=0.0.0.0\n  for row in \"${KNOWN_FIXES[@]}\"; do\n    fixed=${row%%|*} rest=${row#*|}\n    kind=${rest%%|*}\n    if [ \"$kind\" = macos ] && [ \"$OS\" != Darwin ]; then continue; fi\n    ver_lt \"$best\" \"$fixed\" && best=$fixed\n  done\n  printf '%s' \"$best\"\n}\n\n# Lists the known fixes a version is missing, worst first.\nmissing_fixes() {\n  local v=$1 row fixed rest kind what exploited='' others=''\n  for row in \"${KNOWN_FIXES[@]}\"; do\n    fixed=${row%%|*} rest=${row#*|}\n    kind=${rest%%|*} what=${rest#*|}\n    ver_lt \"$v\" \"$fixed\" || continue\n    if [ \"$kind\" = macos ] && [ \"$OS\" != Darwin ]; then continue; fi\n    if [ \"$kind\" = exploited ]; then\n      exploited=\"$exploited${exploited:+, }$what\"\n    else\n      others=\"$others${others:+, }$what\"\n    fi\n  done\n  [ -z \"$exploited\" ] || printf 'exploited in the wild: %s. ' \"$exploited\"\n  [ -z \"$others\" ] || printf 'Also missing: %s.' \"$others\"\n}\n\n# Sets STATUS and WHY for a browser version.\nclassify() {\n  local v=$1\n  WHY=''\n  if ! is_version \"$v\"; then STATUS=UNKNOWN WHY=\"version could not be read\"; return; fi\n  if [ -n \"$MIN_VERSION\" ]; then\n    if ver_lt \"$v\" \"$MIN_VERSION\"; then\n      STATUS=VULNERABLE WHY=\"below your minimum $MIN_VERSION\"\n    else\n      STATUS=OK\n    fi\n    return\n  fi\n  if ver_lt \"$v\" \"$BASELINE\"; then\n    STATUS=VULNERABLE WHY=$(missing_fixes \"$v\")\n    return\n  fi\n  if ver_lt \"$v\" \"$REF_VERSION\"; then\n    if same_release \"$v\" \"$REF_VERSION\"; then\n      STATUS=OK WHY=\"one build behind stable $REF_VERSION; Chrome ships builds in pairs\"\n    else\n      STATUS=OUTDATED WHY=\"behind Chrome stable $REF_VERSION, so it may lack newer fixes\"\n    fi\n    return\n  fi\n  if [ \"$(major \"$v\")\" -gt \"$(major \"$REF_VERSION\")\" ]; then\n    STATUS=PRERELEASE WHY=\"newer than stable, but a frozen pre-release build can lag on fixes\"\n    return\n  fi\n  STATUS=OK\n}\n\nrank() {\n  case $1 in\n    VULNERABLE) echo 1 ;; OUTDATED) echo 2 ;; UNKNOWN) echo 3 ;;\n    PRERELEASE | \"NOT DOWNLOADED\") echo 4 ;; INFO) echo 6 ;; *) echo 7 ;;\n  esac\n}\n\n# ---- Reading files ------------------------------------------------------------\n\n# One JSON object per line, so sed can pick fields without a JSON parser.\njson_objects() { tr -d '\\r\\n' | sed 's/\"revisionOverrides\"[^}]*}//g' | tr '{}' '\\n\\n'; }\n\njson_field() { sed -nE 's/.*\"'\"$1\"'\"[[:space:]]*:[[:space:]]*\"([^\"]*)\".*/\\1/p' | head -n 1 | clean; }\n\nchromium_entry() {\n  json_objects | grep -E '\"name\"[[:space:]]*:[[:space:]]*\"chromium\"' | head -n 1\n}\n\nplist_version() {\n  local f=\"$1/Contents/Info.plist\" v=''\n  [ -r \"$f\" ] || return 0\n  if [ -x /usr/libexec/PlistBuddy ]; then\n    v=$(/usr/libexec/PlistBuddy -c 'Print :CFBundleShortVersionString' \"$f\" 2>/dev/null)\n  fi\n  if [ -z \"$v\" ]; then\n    v=$(tr -d '\\r\\n\\t' <\"$f\" | sed -nE 's/.*CFBundleShortVersionString<\\/key>[[:space:]]*([^<]*)<\\/string>.*/\\1/p')\n  fi\n  printf '%s' \"$v\"\n}\n\n# Pulls the version out of a browser binary without running it.\nbinary_version() {\n  tr -cs '0-9.' '\\n' 2>/dev/null <\"$1\" |\n    grep -E '^[1-9][0-9]{1,3}\\.0\\.[0-9]{4,5}\\.[0-9]{1,4}$' |\n    sort | uniq -c | sort -k1,1rn -k2,2n | awk 'NR==1 {print $2}'\n}\n\n# Playwright's revision number for a path, if it sits in a revision folder.\npath_revision() {\n  printf '%s\\n' \"$1\" | sed -nE 's#.*/(chromium|chromium_headless_shell)-([0-9]+)/.*#\\2#p' | head -n 1\n}\n\nrevision_version() {\n  awk -F \"$SEP\" -v r=\"$1\" '$1 == r && $2 != \"\" {print $2; exit}' \"$T/revmap\"\n}\n\ntool_of() {\n  case $1 in\n    */ms-playwright/* | */.local-browsers/* | */chromium-[0-9]*/* | */chromium_*-[0-9]*/*) echo Playwright ;;\n    */puppeteer/* | */.local-chromium/*) echo Puppeteer ;;\n    */.agent-browser/*) echo agent-browser ;;\n    */selenium/*) echo Selenium ;;\n    /Applications/* | \"$HOME\"/Applications/* | /opt/google/* | /opt/microsoft/* | /usr/lib*/* | /snap/*) echo \"Installed app\" ;;\n    *) echo Other ;;\n  esac\n}\n\nshow_path() {\n  # shellcheck disable=SC2088  # a tilde for display, not for expansion\n  case $1 in\n    \"$HOME\"/*) printf '~/%s' \"${1:${#HOME}+1}\" ;;\n    *) printf '%s' \"$1\" ;;\n  esac | clean\n}\n\n# Shortens a Playwright binary path to its revision folder.\nbrowser_folder() {\n  printf '%s\\n' \"$1\" | sed -E 's#(/chromium[a-z_]*-[0-9]+)/.*#\\1#'\n}\n\n# Runs a command, killing it after $1 seconds. macOS has no timeout(1).\nrun_limited() {\n  local secs=$1 pid watcher rc\n  shift\n  \"$@\" &\n  pid=$!\n  (sleep \"$secs\"; kill -9 \"$pid\" 2>/dev/null) >/dev/null 2>&1 &\n  watcher=$!\n  wait \"$pid\"\n  rc=$?\n  kill \"$watcher\" 2>/dev/null\n  wait \"$watcher\" 2>/dev/null\n  return \"$rc\"\n}\n\nfetch() { curl -fsSL --max-time 15 \"$1\" 2>/dev/null; }\n\n# Chromium version a Playwright release ships, read from its source tag.\nrelease_chromium() {\n  fetch \"$PW_RAW/v$1/packages/playwright-core/browsers.json\" | chromium_entry | json_field browserVersion\n}\n\n# ---- Reference versions -------------------------------------------------------\n\nBASELINE=$(baseline)\nREF_VERSION=$BASELINE REF_NOTE=\"built-in list from $BASELINE_DATE, may be out of date\"\nLATEST_PW='' LATEST_PW_CHROMIUM=''\n\nif [ -n \"$MIN_VERSION\" ]; then\n  is_version \"$MIN_VERSION\" || { echo \"--min-version must look like 156.0.8078.79\" >&2; exit 64; }\n  REF_VERSION=$MIN_VERSION REF_NOTE=\"your minimum, set with --min-version\"\nfi\n\nreference_failed() {\n  incomplete \"Could not reach Google for the current Chrome version, so this used the built-in list from $BASELINE_DATE.\"\n}\n\nif [ \"$OFFLINE\" = 0 ] && command -v curl >/dev/null 2>&1; then\n  if [ -z \"$MIN_VERSION\" ]; then\n    stable=$(fetch \"$CFT_URL\" | json_objects | grep -E '\"channel\"[[:space:]]*:[[:space:]]*\"Stable\"' | json_field version)\n    if ! is_version \"$stable\"; then\n      reference_failed\n    elif ver_lt \"$stable\" \"$REF_VERSION\"; then\n      REF_NOTE=\"built-in list; Google's feed still says $stable\"\n    else\n      REF_VERSION=$stable REF_NOTE=\"live from Google\"\n    fi\n  fi\n  LATEST_PW=$(fetch \"$NPM_URL\" | grep -oE '\"version\":\"[^\"]+\"' | head -n 1 | json_field version)\n  [ -z \"$LATEST_PW\" ] || LATEST_PW_CHROMIUM=$(release_chromium \"$LATEST_PW\")\nelif [ -z \"$MIN_VERSION\" ] && [ \"$OFFLINE\" = 0 ]; then\n  reference_failed\nfi\n\n# ---- Where to search ----------------------------------------------------------\n\nadd_root() {\n  local r\n  for r in \"$@\"; do\n    [ -n \"$r\" ] && [ -d \"$r\" ] && ROOTS+=(\"$r\")\n  done\n}\n\n# Where tools keep browsers. Searched in every mode, because any of these can be\n# a link to another disk, or sit outside the home folder.\ncache_roots() {\n  add_root \"$HOME/Library/Caches/ms-playwright\" \"$HOME/.cache/ms-playwright\" \\\n    \"${XDG_CACHE_HOME:-}/ms-playwright\" \"${PLAYWRIGHT_BROWSERS_PATH:-}\" \\\n    \"$HOME/.cache/puppeteer\" \"${PUPPETEER_CACHE_DIR:-}\" \\\n    \"$HOME/.agent-browser\" \"$HOME/.cache/selenium\"\n  case $OS in\n    Darwin)\n      add_root /Applications/Google\\ Chrome*.app /Applications/Chromium*.app /Applications/Microsoft\\ Edge*.app \\\n        \"$HOME\"/Applications/Google\\ Chrome*.app \"$HOME\"/Applications/Chromium*.app\n      ;;\n    *)\n      add_root /opt/google /opt/microsoft /usr/lib/chromium /usr/lib/chromium-browser \\\n        /usr/lib64/chromium-browser /snap/chromium/current\n      ;;\n  esac\n  [ \"$IS_ROOT\" = 0 ] || add_root /Users/*/Library/Caches/ms-playwright /home/*/.cache/ms-playwright \\\n    /root/.cache/ms-playwright /var/root/Library/Caches/ms-playwright\n}\n\ncache_roots\ncase $MODE in\n  quick) ;;\n  all)\n    for d in /*; do\n      case $d in\n        /proc | /sys | /dev | /run | /System | /Volumes | /Network | /cores) ;;\n        /bin | /sbin | /boot | /lib | /lib32 | /lib64 | /libx32 | /lost+found) ;;\n        # On macOS these are links into /private, which is searched anyway.\n        /tmp | /var | /etc) [ \"$OS\" = Darwin ] || add_root \"$d\" ;;\n        *) add_root \"$d\" ;;\n      esac\n    done\n    ;;\n  *)\n    add_root \"$HOME\" \"${TMPDIR:-}\"\n    case $OS in\n      Darwin) add_root /Applications /Library /opt /usr/local /private/tmp /Users/Shared ;;\n      *) add_root /opt /usr/local /usr/lib /usr/lib64 /usr/share /srv /var/lib /var/www /var/opt /var/cache /tmp ;;\n    esac\n    [ \"$IS_ROOT\" = 0 ] || add_root /Users/* /home/* /root /var/root\n    ;;\nesac\nadd_root \"${EXTRA_ROOTS[@]}\"\n\n# With no caches at all, --quick has nothing to look at, which is a clean result.\n[ ${#ROOTS[@]} -gt 0 ] || ROOTS=(\"$T\")\n\n# Cloud folders can be slow and fetch files on demand, so only --all walks them.\nCLOUD=()\nif [ \"$MODE\" != all ]; then\n  CLOUD=(-o -path '*/Library/CloudStorage' -o -path '*/Library/Mobile Documents')\nfi\n\n# ---- Report header ------------------------------------------------------------\n\nHOST=$(hostname 2>/dev/null)\nif [ \"$OS\" = Darwin ]; then\n  OS_LABEL=\"macOS $(sw_vers -productVersion 2>/dev/null)\"\nelse\n  OS_LABEL=$OS\nfi\nprintf '%sPlaywright and Chromium audit%s  %s, %s %s, %s\\n' \"$C_BLD\" \"$C_OFF\" \"$HOST\" \"$OS_LABEL\" \"$(uname -m)\" \"$(date '+%Y-%m-%d %H:%M')\"\nprintf 'Checking against: %s (%s)\\n' \"$REF_VERSION\" \"$REF_NOTE\"\nLATEST_STATUS=''\nif [ -n \"$LATEST_PW_CHROMIUM\" ]; then\n  classify \"$LATEST_PW_CHROMIUM\"\n  LATEST_STATUS=$STATUS\n  printf 'Latest Playwright: %s, ships Chromium %s (%s)\\n' \"$LATEST_PW\" \"$LATEST_PW_CHROMIUM\" \"$LATEST_STATUS\"\nfi\nif [ \"$MODE\" = quick ]; then\n  note \"Searching browser caches only (--quick)...\"\nelse\n  note \"Searching ${#ROOTS[@]} locations. This can take a few minutes on a big disk...\"\n  [ \"$OS\" != Darwin ] || note \"If macOS asks for folder access, allow it so those folders get searched.\"\nfi\n\n# ---- Search -------------------------------------------------------------------\n\nODD_PATHS=0\nwhile IFS= read -r -d '' p; do\n  case $p in\n    *$'\\n'*) ODD_PATHS=$((ODD_PATHS + 1)) ;;\n    *.app) printf '%s\\n' \"$p\" >>\"$T/apps\" ;;\n    */browsers.json) printf '%s\\n' \"${p%/*}\" >>\"$T/pkgdirs\" ;;\n    *.jar | *.zip) printf '%s\\n' \"$p\" >>\"$T/archives\" ;;\n    *) [ ! -x \"$p\" ] || printf '%s\\n' \"$p\" >>\"$T/bins\" ;;\n  esac\ndone < <(find -H \"${ROOTS[@]}\" \\\n  \\( -type d \\( -name .git -o -name .Trash -o -name '.Trash-*' -o -name '*.photoslibrary' \\\n  -o -name .Spotlight-V100 -o -name .fseventsd -o -name .DocumentRevisions-V100 \\\n  -o -path '*/Library/Mail' -o -path '*/Library/Messages' -o -path '*/Library/Safari' \\\n  -o -path '*/Library/Containers/com.docker.docker' -o -path /private/var/vm \"${CLOUD[@]}\" \\) -prune \\) -o \\\n  \\( -type d \\( -name 'Google Chrome*.app' -o -name 'Chromium*.app' -o -name 'Microsoft Edge*.app' \\) -print0 -prune \\) -o \\\n  \\( -type f \\( -name browsers.json -o -name chrome -o -name chrome-headless-shell -o -name headless_shell \\\n  -o -name chromium -o -name chromium-browser -o -name msedge \\\n  -o -name 'driver-bundle-*.jar' -o -name 'playwright-core-npm-*.zip' \\) -print0 \\) \\\n  2>\"$T/find.err\"; echo \"$?\" >\"$T/find.rc\")\n\n[ \"$ODD_PATHS\" -eq 0 ] || incomplete \"$ODD_PATHS path(s) with a line break in the name were skipped.\"\n\n# Each Playwright browser cache lists the installs that use it in .links/.\n{\n  sed -nE 's#^(.*)/chromium[a-z_]*-[0-9]+/.*#\\1#p' \"$T/apps\" \"$T/bins\"\n  printf '%s\\n' \"$HOME/Library/Caches/ms-playwright\" \"$HOME/.cache/ms-playwright\"\n  [ -z \"${PLAYWRIGHT_BROWSERS_PATH:-}\" ] || printf '%s\\n' \"$PLAYWRIGHT_BROWSERS_PATH\"\n} | sort -u >\"$T/caches\"\nwhile IFS= read -r cache; do\n  for link in \"$cache\"/.links/*; do\n    [ -f \"$link\" ] || continue\n    target=$(head -n 1 \"$link\" 2>/dev/null)\n    [ ! -f \"$target/browsers.json\" ] || printf '%s\\n' \"$target\" >>\"$T/pkgdirs\"\n  done\ndone <\"$T/caches\"\n\n# ---- Playwright packages ------------------------------------------------------\n\nadd_package() { # path, package name, version, browsers.json text\n  local shown=$1 name=$2 version=$3 entry rev bver\n  entry=$(printf '%s' \"$4\" | chromium_entry)\n  rev=$(printf '%s' \"$entry\" | json_field revision)\n  [ -n \"$rev\" ] || return 0\n  bver=$(printf '%s' \"$entry\" | json_field browserVersion)\n  printf '%s%s%s\\n' \"$rev\" \"$SEP\" \"$bver\" >>\"$T/revmap\"\n  printf '%s%s%s%s%s%s%s%s%s\\n' \"$shown\" \"$SEP\" \"$name\" \"$SEP\" \"$version\" \"$SEP\" \"$rev\" \"$SEP\" \"$bver\" >>\"$T/pkg_raw\"\n}\n\n: >\"$T/pkg_raw\"\nsort -u \"$T/pkgdirs\" | while IFS= read -r dir; do\n  json=$(cat \"$dir/browsers.json\" 2>/dev/null)\n  pkg=$(head -n 40 \"$dir/package.json\" 2>/dev/null)\n  add_package \"$dir\" \"$(printf '%s\\n' \"$pkg\" | json_field name)\" \"$(printf '%s\\n' \"$pkg\" | json_field version)\" \"$json\"\ndone\n\n# Yarn PnP zips and Java driver jars keep the same files inside an archive.\nif command -v unzip >/dev/null 2>&1; then\n  sort -u \"$T/archives\" | while IFS= read -r file; do\n    json=$(unzip -p \"$file\" '*/browsers.json' 2>/dev/null)\n    version=$(printf '%s\\n' \"${file##*/}\" | sed -nE 's/^(playwright-core-npm|driver-bundle)-([0-9][0-9A-Za-z.]*[0-9])[-.].*/\\2/p')\n    add_package \"$file\" playwright-core \"$version\" \"$json\"\n  done\nfi\n\n# ---- Browsers on disk ---------------------------------------------------------\n\nadd_browser() { # status, version, tool, shown path, why\n  printf '%s%s%s%s%s%s%s%s%s%s%s\\n' \"$(rank \"$1\")\" \"$SEP\" \"$1\" \"$SEP\" \"$2\" \"$SEP\" \"$3\" \"$SEP\" \"$4\" \"$SEP\" \"$5\" >>\"$T/browsers\"\n}\n\nrecord_browser() { # path, version\n  local path=$1 version=$2 rev tool\n  is_version \"$version\" || version=''\n  rev=$(path_revision \"$path/\")\n  if [ -z \"$version\" ] && [ -n \"$rev\" ]; then\n    version=$(revision_version \"$rev\")\n    is_version \"$version\" || version=''\n  fi\n  [ -z \"$rev\" ] || printf '%s%s%s\\n' \"$rev\" \"$SEP\" \"$version\" >>\"$T/disk_revs\"\n  tool=$(tool_of \"$path/\")\n  case ${path##*/} in\n    Microsoft\\ Edge*.app | msedge)\n      # Edge has its own build numbers, but its major version tracks Chromium's.\n      if is_version \"$version\" && [ \"$(major \"$version\")\" -lt \"$(major \"$REF_VERSION\")\" ]; then\n        add_browser OUTDATED \"$version\" \"Microsoft Edge\" \"$(show_path \"$path\")\" \"behind the current Chromium major version\"\n      else\n        add_browser INFO \"${version:-?}\" \"Microsoft Edge\" \"$(show_path \"$path\")\" \"Edge numbers its builds differently, so keep it updated from its About page\"\n      fi\n      return\n      ;;\n  esac\n  classify \"$version\"\n  # Beta and Canary update themselves, unlike a build frozen in a tool's cache.\n  if [ \"$STATUS\" = PRERELEASE ] && [ \"$tool\" = \"Installed app\" ]; then\n    STATUS=OK WHY=\"pre-release channel that updates itself\"\n  fi\n  add_browser \"$STATUS\" \"${version:-?}\" \"$tool\" \"$(show_path \"$(browser_folder \"$path\")\")\" \"$WHY\"\n}\n\nsort -u \"$T/apps\" | while IFS= read -r app; do\n  record_browser \"$app\" \"$(plist_version \"$app\")\"\ndone\nsort -u \"$T/bins\" | while IFS= read -r bin; do\n  version=$(binary_version \"$bin\")\n  # A small file with no version is a wrapper script, not a browser.\n  if [ -z \"$version\" ] && [ -r \"$bin\" ] && [ -z \"$(path_revision \"$bin/\")\" ] && [ \"$(wc -c <\"$bin\")\" -lt 1000000 ]; then\n    continue\n  fi\n  record_browser \"$bin\" \"$version\"\ndone\nsort -u \"$T/browsers\" -o \"$T/browsers\"\n\n# ---- Playwright installs ------------------------------------------------------\n\n# The oldest build in a revision's folders. Someone may have swapped in a newer\n# one by hand, so what is on disk beats what the package pins.\nlowest_on_disk() {\n  local r v low=''\n  while IFS=\"$SEP\" read -r r v; do\n    [ \"$r\" = \"$1\" ] && [ -n \"$v\" ] || continue\n    if [ -z \"$low\" ] || ver_lt \"$v\" \"$low\"; then low=$v; fi\n  done <\"$T/disk_revs\"\n  printf '%s' \"$low\"\n}\n\nsort -u \"$T/pkg_raw\" | while IFS=\"$SEP\" read -r shown name version rev bver; do\n  actual=$(lowest_on_disk \"$rev\")\n  actual=${actual:-$bver}\n  if [ -n \"$actual\" ]; then\n    classify \"$actual\"\n  else\n    STATUS=VULNERABLE WHY=\"too old to report its Chromium version\"\n  fi\n  label=\"Chromium ${actual:-rev $rev}\"\n  case $STATUS in\n    VULNERABLE | OUTDATED | PRERELEASE)\n      [ -n \"$actual\" ] && WHY=''\n      grep -q \"^$rev$SEP\" \"$T/disk_revs\" || STATUS=\"NOT DOWNLOADED\" WHY=''\n      ;;\n  esac\n  version=${version:-?}\n  case $version in\n    *-alpha-*) version=\"${version%%-alpha-*}-alpha\" ;;\n    *-beta-*) version=\"${version%%-beta-*}-beta\" ;;\n  esac\n  case $name in\n    playwright-core | '') ;;\n    *) version=\"$version ($name)\" ;;\n  esac\n  printf '%s%s%s%s%s%s%s%s%s%s%s\\n' \"$(rank \"$STATUS\")\" \"$SEP\" \"$STATUS\" \"$SEP\" \"$version\" \"$SEP\" \"$label\" \"$SEP\" \"$(show_path \"$shown\")\" \"$SEP\" \"$WHY\" >>\"$T/packages\"\ndone\nsort -u \"$T/packages\" -o \"$T/packages\"\n\n# ---- Docker images ------------------------------------------------------------\n\nadd_image() { # status, version, image, why\n  printf '%s%s%s%s%s%s%s%s%s\\n' \"$(rank \"$1\")\" \"$SEP\" \"$1\" \"$SEP\" \"$2\" \"$SEP\" \"$3\" \"$SEP\" \"$4\" >>\"$T/images\"\n}\n\nif command -v docker >/dev/null 2>&1; then\n  if run_limited 10 docker image ls --format '{{.Repository}}:{{.Tag}}' >\"$T/image_list\" 2>/dev/null; then\n    grep -i playwright \"$T/image_list\" | clean | sort -u >\"$T/image_names\"\n    while IFS= read -r image; do\n      pw=$(printf '%s\\n' \"${image##*:}\" | grep -oE '[0-9]+\\.[0-9]+\\.[0-9]+' | head -n 1)\n      bver=''\n      if [ -n \"$pw\" ] && [ \"$OFFLINE\" = 0 ]; then bver=$(release_chromium \"$pw\"); fi\n      if [ -n \"$bver\" ]; then\n        classify \"$bver\"\n        add_image \"$STATUS\" \"$bver\" \"$image\" \"$WHY\"\n      else\n        add_image UNKNOWN \"?\" \"$image\" \"cannot tell its Chromium from the tag; check inside the image\"\n      fi\n    done <\"$T/image_names\"\n    sort -u \"$T/images\" -o \"$T/images\"\n  else\n    limit \"Could not list Docker images. Start Docker and run this again to check them.\"\n  fi\nfi\n\n# ---- Running processes --------------------------------------------------------\n\nps axww -o command= 2>/dev/null >\"$T/ps\"\n# Only lines that start with a browser program, so a command that merely\n# mentions one (an editor, a grep) is not counted. Helpers carry --type=.\ngrep -E '^/[^ ]*/(chrome-headless-shell[^ ]*|headless_shell)( |$)|^/[^ ]*(ms-playwright|local-browsers|pw-browsers|puppeteer|agent-browser)[^ ]*/chrome( |$)|^/.*(Google Chrome for Testing\\.app/Contents/MacOS/Google Chrome for Testing|Chromium\\.app/Contents/MacOS/Chromium)( |$)' \"$T/ps\" |\n  grep -v -e '--type=' >\"$T/running\"\nRUNNING=$(awk 'END {print NR}' \"$T/running\")\nNO_SANDBOX=$(grep -c -e '--no-sandbox' \"$T/running\")\nOLD_CHROME=''\nif [ \"$OS\" = Darwin ]; then\n  for v in $(grep -oE 'Google Chrome Framework\\.framework/Versions/[0-9.]+' \"$T/ps\" | sed 's#.*/##' | sort -u); do\n    classify \"$v\"\n    case $STATUS in\n      VULNERABLE | OUTDATED) OLD_CHROME=\"$OLD_CHROME${OLD_CHROME:+, }$v\" ;;\n    esac\n  done\nfi\n\n# ---- What the search could not cover ------------------------------------------\n\ngrep -vE 'Permission denied|Operation not permitted|No such file or directory' \"$T/find.err\" | clean >\"$T/find.other\"\nFIND_RC=$(cat \"$T/find.rc\" 2>/dev/null)\nif [ -z \"$FIND_RC\" ] || [ \"$FIND_RC\" -gt 1 ] || [ -s \"$T/find.other\" ]; then\n  reason=$(head -n 1 \"$T/find.other\")\n  incomplete \"The search did not finish cleanly (${reason:-find stopped with code ${FIND_RC:-unknown}}).\"\nfi\n\n# A refused folder only counts against a clean result if an install could be in\n# it. macOS refuses its own app data (Calendar, Contacts and so on) without Full\n# Disk Access, and other people's folders are refused without sudo.\ndenied_matters() {\n  local r rest\n  case $1 in\n    */ms-playwright* | */node_modules* | */site-packages* | */pnpm* | */puppeteer* | */.local-browsers*) return 0 ;;\n  esac\n  if [ \"$OS\" = Darwin ]; then\n    # Matches /Library/... and /Users/someone/Library/..., not any folder called Library.\n    rest=${1#/Users/}\n    rest=${rest#*/}\n    case $rest in Library/*) return 1 ;; esac\n    case $1 in \"$HOME\"/Library/* | /private/*) return 1 ;; esac\n  fi\n  [ \"$IS_ROOT\" = 0 ] || return 0\n  case $1 in\n    \"$HOME\" | \"$HOME\"/*) return 0 ;;\n  esac\n  for r in \"${EXTRA_ROOTS[@]}\"; do\n    case $1 in\n      \"$r\" | \"$r\"/*) return 0 ;;\n    esac\n  done\n  return 1\n}\n\n: >\"$T/denied_main\"; : >\"$T/denied_other\"\ngrep -E 'Permission denied|Operation not permitted' \"$T/find.err\" | clean |\n  sed -E \"s/^[^:]*: *//; s/: (Permission denied|Operation not permitted)$//; s/^'//; s/'$//\" |\n  while IFS= read -r dir; do\n    if denied_matters \"$dir\"; then\n      show_path \"$dir\" >>\"$T/denied_main\"\n      echo >>\"$T/denied_main\"\n    else\n      echo \"$dir\" >>\"$T/denied_other\"\n    fi\n  done\nN_DENIED=$(awk 'END {print NR}' \"$T/denied_main\")\nN_OTHER=$(awk 'END {print NR}' \"$T/denied_other\")\nif [ \"$N_DENIED\" -gt 0 ]; then\n  incomplete \"$N_DENIED folder(s) could not be read, for example:\"\n  head -n 3 \"$T/denied_main\" | sed 's/^/      /' >>\"$T/limits\"\n  if [ \"$OS\" = Darwin ]; then\n    limit \"To cover them, allow the folder-access prompts or give your terminal Full Disk Access\"\n    limit \"in System Settings, then run this again.\"\n  else\n    limit \"To cover them, run this again with sudo.\"\n  fi\nfi\n[ \"$N_OTHER\" -eq 0 ] || limit \"$N_OTHER private system or other-user folder(s) could not be read. An install there is unlikely.\"\n\nif [ \"$MODE\" = default ] && { [ -d \"$HOME/Library/CloudStorage\" ] || [ -d \"$HOME/Library/Mobile Documents\" ]; }; then\n  limit \"Cloud-synced folders in ~/Library were skipped. Name one as a folder to search it, or use --all.\"\nfi\n[ \"$MODE\" != quick ] || limit \"--quick only looked in browser caches. Run without it to search all projects.\"\n\n# ---- Report -------------------------------------------------------------------\n\npaint() {\n  case $1 in\n    VULNERABLE) printf '%s' \"$C_RED\" ;;\n    OUTDATED | UNKNOWN | PRERELEASE | \"NOT DOWNLOADED\") printf '%s' \"$C_YEL\" ;;\n    OK) printf '%s' \"$C_GRN\" ;;\n  esac\n}\n\nheading \"BROWSERS ON DISK\"\n[ -s \"$T/browsers\" ] || echo \"  None found.\"\nwhile IFS=\"$SEP\" read -r r s ver tool shown why; do\n  if [ \"$QUIET\" = 1 ] && [ \"$r\" -gt 4 ]; then continue; fi\n  printf '  %s%-14s%s %-15s %-14s %s\\n' \"$(paint \"$s\")\" \"$s\" \"$C_OFF\" \"$ver\" \"$tool\" \"$shown\"\n  if [ -n \"$why\" ]; then printf '  %s%14s %s%s\\n' \"$C_DIM\" \"\" \"$why\" \"$C_OFF\"; fi\ndone <\"$T/browsers\"\n\nif [ -s \"$T/packages\" ]; then\n  heading \"PLAYWRIGHT INSTALLS\"\n  while IFS=\"$SEP\" read -r r s ver label shown why; do\n    if [ \"$QUIET\" = 1 ] && [ \"$r\" -gt 4 ]; then continue; fi\n    printf '  %s%-14s%s %-15s %-23s %s\\n' \"$(paint \"$s\")\" \"$s\" \"$C_OFF\" \"$ver\" \"$label\" \"$shown\"\n    if [ -n \"$why\" ]; then printf '  %s%14s %s%s\\n' \"$C_DIM\" \"\" \"$why\" \"$C_OFF\"; fi\n  done <\"$T/packages\"\n  if grep -q \"${SEP}NOT DOWNLOADED$SEP\" \"$T/packages\"; then\n    printf '  %sNOT DOWNLOADED: pins a build that is unpatched or unconfirmed, but that build was%s\\n' \"$C_DIM\" \"$C_OFF\"\n    printf '  %snot found in the folders searched. Its next \"playwright install\" would fetch it.%s\\n' \"$C_DIM\" \"$C_OFF\"\n  fi\nfi\n\nif [ -s \"$T/images\" ]; then\n  heading \"DOCKER IMAGES\"\n  while IFS=\"$SEP\" read -r r s ver image why; do\n    if [ \"$QUIET\" = 1 ] && [ \"$r\" -gt 4 ]; then continue; fi\n    printf '  %s%-14s%s %-15s %s\\n' \"$(paint \"$s\")\" \"$s\" \"$C_OFF\" \"$ver\" \"$image\"\n    if [ -n \"$why\" ]; then printf '  %s%14s %s%s\\n' \"$C_DIM\" \"\" \"$why\" \"$C_OFF\"; fi\n  done <\"$T/images\"\nfi\n\nif [ \"$RUNNING\" -gt 0 ] || [ -n \"$OLD_CHROME\" ]; then\n  heading \"RUNNING NOW\"\n  [ \"$RUNNING\" -eq 0 ] || printf '  %s automation browser(s) running, %s with --no-sandbox. Running browsers keep their old code until restarted.\\n' \"$RUNNING\" \"$NO_SANDBOX\"\n  [ -z \"$OLD_CHROME\" ] || printf '  %sGoogle Chrome is still running %s. Relaunch it to finish updating.%s\\n' \"$C_YEL\" \"$OLD_CHROME\" \"$C_OFF\"\nfi\n\nif [ -s \"$T/limits\" ]; then\n  heading \"LIMITS OF THIS RUN\"\n  cat \"$T/limits\"\nfi\n\ncount_status() { cut -d \"$SEP\" -f 2 \"$T/browsers\" \"$T/images\" 2>/dev/null | grep -cx \"$1\"; }\nN_VULN=$(count_status VULNERABLE)\nN_OUT=$(count_status OUTDATED)\nN_PRE=$(count_status PRERELEASE)\nN_UNKNOWN=$(cut -d \"$SEP\" -f 2 \"$T/browsers\" \"$T/images\" \"$T/packages\" 2>/dev/null | grep -cx UNKNOWN)\n\nheading \"RESULT\"\nif [ \"$N_VULN\" -gt 0 ] || [ \"$N_OUT\" -gt 0 ] || [ -n \"$OLD_CHROME\" ]; then\n  EXIT=1\n  printf '  %sFound %s vulnerable and %s outdated browsers.%s\\n' \"$C_RED\" \"$N_VULN\" \"$N_OUT\" \"$C_OFF\"\n  [ -z \"$OLD_CHROME\" ] || printf '  %sGoogle Chrome needs a relaunch.%s\\n' \"$C_RED\" \"$C_OFF\"\nelif [ \"$N_UNKNOWN\" -gt 0 ] || [ \"$N_PRE\" -gt 0 ] || [ \"$INCOMPLETE\" = 1 ]; then\n  EXIT=2\n  printf '  %sNothing known to be vulnerable, but this run could not confirm everything (see above).%s\\n' \"$C_YEL\" \"$C_OFF\"\nelse\n  EXIT=0\n  printf '  %sNo vulnerable or outdated browser found.%s\\n' \"$C_GRN\" \"$C_OFF\"\nfi\n\n# True if a browser row for any of these tools is vulnerable or outdated.\nflagged() {\n  local t\n  for t in \"$@\"; do\n    awk -F \"$SEP\" -v t=\"$t\" '($2 == \"VULNERABLE\" || $2 == \"OUTDATED\") && $4 == t {found = 1} END {exit !found}' \"$T/browsers\" && return 0\n  done\n  return 1\n}\n\nif [ \"$EXIT\" = 1 ]; then\n  heading \"WHAT TO DO\"\n  if [ -n \"$OLD_CHROME\" ] || flagged \"Installed app\" \"Microsoft Edge\"; then\n    echo \"  Update the installed browsers listed above from their About pages, then relaunch them.\"\n  fi\n  if flagged Playwright || grep -qE \"^[0-9]+$SEP(VULNERABLE|OUTDATED)$SEP\" \"$T/images\"; then\n    if [ \"$LATEST_STATUS\" = OK ] || [ \"$LATEST_STATUS\" = PRERELEASE ]; then\n      cat <<EOF\n  Upgrade Playwright to $LATEST_PW, then fetch its browser:\n    npm i -D @playwright/test@latest && npx playwright install chromium\n    pip install -U playwright && playwright install chromium    (Python)\nEOF\n    else\n      if [ -n \"$LATEST_PW_CHROMIUM\" ]; then\n        printf '  No stable Playwright ships a fully patched Chromium yet (%s has %s).\\n' \"$LATEST_PW\" \"$LATEST_PW_CHROMIUM\"\n        gaps=$(missing_fixes \"$LATEST_PW_CHROMIUM\")\n        case $gaps in\n          *exploited*) printf '  Still move older installs to %s.\\n' \"$LATEST_PW\" ;;\n          *) printf '  Still move older installs to %s, which closes the older exploited bugs.\\n' \"$LATEST_PW\" ;;\n        esac\n      else\n        echo \"  Upgrade Playwright, then check whether its Chromium is patched yet.\"\n      fi\n      cat <<'EOF'\n  Until a patched release ships, use your up-to-date Chrome for anything that\n  touches the open web, and keep the sandbox on:\n    chromium.launch({ channel: 'chrome', chromiumSandbox: true })\n    use: { channel: 'chrome', launchOptions: { chromiumSandbox: true } }    (Playwright Test)\n  Keep the bundled browser to pages you trust, such as your own localhost.\nEOF\n    fi\n    echo \"  Playwright passes --no-sandbox unless chromiumSandbox is true, so set it either way.\"\n  fi\n  if flagged Puppeteer agent-browser Selenium Other; then\n    echo \"  For Puppeteer, agent-browser and other tools listed above, update the tool itself.\"\n  fi\n  echo \"  Then delete browser folders nothing needs, restart running sessions, and run this again.\"\nfi\n\nexit \"$EXIT\"\n", "url": "https://gist.github.com/mrcointreau/f5d7de316059888275a16060ce02157a"}, {"timestamp": "2026-11-04T23:00:00Z", "date_only": false, "value": "2026-11-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.11.date", "linked_record": true}, {"timestamp": "2026-11-05T23:00:00Z", "date_only": false, "value": "2026-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.12.date", "linked_record": true}, {"timestamp": "2026-11-10T16:02:04Z", "date_only": false, "value": "2026-11-10T16:02:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21921-1", "record": "OPENSUSE-SU-2026:21921-1", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-11-10T16:02:04Z", "date_only": false, "value": "2026-11-10T16:02:04Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21921-1", "record": "OPENSUSE-SU-2026:21921-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-10T23:00:00Z", "date_only": false, "value": "2026-11-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.revision_history.13.date", "linked_record": true}, {"timestamp": "2026-11-10T23:00:00Z", "date_only": false, "value": "2026-11-10T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-11T13:02:57.689Z", "date_only": false, "value": "2026-11-11T13:02:57.689+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-12T18:00:08Z", "date_only": false, "value": "2026-11-12T18:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/110365", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "bc09fc4a-2b0f-4a34-ac4d-ddb2e3b8842b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-87491-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dexteon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-11-12 17:11:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nResearch notes for cve-2026-87491-poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/110365", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-12T18:00:08Z", "date_only": false, "value": "2026-11-12T18:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/110365", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "33ddb4d3-db53-48c7-bf83-8d3a04cbc042", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-87491-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dexteon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-11-12 17:11:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nResearch notes for cve-2026-87491-poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/110365"}, {"timestamp": "2026-11-13T03:00:08Z", "date_only": false, "value": "2026-11-13T03:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6cvZq1Q02BnZT5VJ58XF8l7upjAGOCwYjn7D_5gO62t3ECs", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "ea8c7e7e-c990-4d22-8156-e288a09f266d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-13T21:00:01Z", "date_only": false, "value": "2026-11-13T21:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-14T09:02:59.656Z", "anchors": {"origin": {"timestamp": "2026-09-08T22:00:00Z", "date_only": false, "value": "2026-09-08T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-08T22:00:00Z", "date_only": false, "value": "2026-09-08T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2026-09-16T00:00:10.405Z", "date_only": false, "value": "2026-09-16T00:00:10.405460Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102430", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "725c5b83-ded3-45b9-b1bc-578667986fac", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 20:05:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102430", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 7200.0, "hours": 2.0, "days": 0.08333333333333333, "min_seconds": 7200.0, "max_seconds": 93600.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-08T22:00:00Z", "date_only": false, "value": "2026-09-08T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 7200.0, "hours": 2.0, "days": 0.08333333333333333, "min_seconds": 7200.0, "max_seconds": 93600.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-08T22:00:00Z", "date_only": false, "value": "2026-09-08T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 612010.405, "hours": 170.0028902777778, "days": 7.0834537615740745, "min_seconds": 612010.405, "max_seconds": 612010.405, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-08T22:00:00Z", "date_only": false, "value": "2026-09-08T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-09-16T00:00:10.405Z", "date_only": false, "value": "2026-09-16T00:00:10.405460Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102430", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "725c5b83-ded3-45b9-b1bc-578667986fac", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 20:05:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102430", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 5742179.656706, "hours": 1595.0499046405555, "days": 66.46041269335647, "min_seconds": 5742179.656706, "max_seconds": 5742179.656706, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-08T22:00:00Z", "date_only": false, "value": "2026-09-08T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3238", "record": "WID-SEC-W-2026-3238", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-14T09:02:59.656Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 5734979.656706, "hours": 1593.0499046405555, "days": 66.37707936002315, "min_seconds": 5648579.656706, "max_seconds": 5734979.656706, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-87491", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0a37c372-acc3-4022-9d5f-11bdf31cccbc", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-14T09:02:59.656Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 5130169.251706, "hours": 1425.0470143627779, "days": 59.37695893178241, "min_seconds": 5130169.251706, "max_seconds": 5130169.251706, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-16T00:00:10.405Z", "date_only": false, "value": "2026-09-16T00:00:10.405460Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102430", "record": "CVE-2026-87491", "field": "creation_timestamp", "uuid": "725c5b83-ded3-45b9-b1bc-578667986fac", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 20:05:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102430", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T09:02:59.656Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}