September 10, 2026
- Chrome shipped 230 fixes on Tuesday including CVE-2026-87491, an out-of-bounds write in V8 under active exploitation — the seventh exploited Chrome zero-day this year, and distinct from the BlueMoon CVEs (BleepingComputer, The Hacker News). · Exploited in the Wild
in One Exploit Kit, Four Espionage Crews: BlueMoon Turns Chrome's Patch Gap Into a Shared Weapon