Google fixes the seventh actively exploited Chrome zero-day of 2026
2026-09-09T14:51:38Z•e584e9228af8886eb375b787e52ff71551cb66a61374cf371c7ec0f87c8c98c9
CVE-2026-87491APISChromeExchangeF5 BIG-IPHAProxyLinux rootkitMFA bypassMicrosoft DefenderNorth KoreaPHP web shellPatch TuesdayPoisonedRefreshV8WeChatactively exploitedbackdoorcrypto theftdata exposurefileless malwareproof of conceptsocial engineeringwormable vulnerabilitieszero-click exploitzero-day
What happened
Security news feed covering an actively exploited Chrome V8 zero-day (CVE-2026-87491), a fileless PoisonedRefresh Linux rootkit targeting F5 BIG-IP APM, a Microsoft Defender zero-day proof of concept, Microsoft’s September 2026 Patch Tuesday, major crypto theft, a zero-click WeChat account takeover worm, exposed passenger data, a North Korea-linked HAProxy backdoor, help-desk impersonation attacks bypassing MFA, and large-scale data leaks.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- e584e9228af8886eb375b787e52ff71551cb66a61374cf371c7ec0f87c8c98c9
- Enrichment time
- 2026-09-09T14:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.