Signalis
sign in--:--:--UTC
CVEs

CVE-2026-87491

exploited in the wild☆ pin
CVSS
—
Reports
17
First seen
Sep 9, 2026
Last seen
Oct 15, 2026
Affected product

Google Chrome

Associated actors

UTA0565 ×4UNK_DoubleCheck ×3JungleBamboo ×3UNK_LateNight ×3UTA0560 ×3APT31 ×2UNK_QuietRacket ×2APT29 ×1ShinyHunters ×1TeamPCP ×1UNC3569 ×1Rhysida ×1Carbonato ×1China-aligned espionage groups (BlueMoon campaign) ×1EvilTokens ×1Fire Ant ×1Iran-linked threat actor ×1OpenAI agents (malicious swarm) ×1

Recent reports

Critical

Multiple Vulnerabilities in Palo Alto Products – GovCERT.HK Alert A26-10-22

GovCERT.HKHigh

Cyber Brief 26-10 – September 2026

CERT-EU Threat IntelCritical

Chinese Threat Actor UTA0565 Exploits Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

The Hacker NewsCritical

Volexity discovers China-aligned UTA0565 exploiting Chrome and Windows zero-days

CyberScoopCritical

Fake Websites Used to Deploy Chrome & Windows 0-Day Exploits by Chinese APT

VolexityCritical

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE Backdoor

The Hacker NewsHigh

Weekly Recap: AI Agents in Attacks, RubyGems Compromise, WeChat Worm, PaperCut Exploitation

The Hacker NewsHigh

Multiple Vulnerabilities in Microsoft Edge – Security Alert A26-09-22

GovCERT.HKCritical

BlueMoon exploit kit chains Windows and Chrome zero-days in state-sponsored campaigns

Bleeping ComputerCritical

Google Chrome Multiple Vulnerabilities

HKCERTCritical

Chinese espionage groups exploit zero-day chain targeting browsers and Windows

CyberScoopCritical

Chinese espionage groups exploit BlueMoon zero-day chain targeting browsers and Windows

Proofpoint Threat InsightHigh

Google Chrome Vulnerability CVE-2026-87491 Exploited in the Wild

Canadian Centre AlertsCritical

Chinese Threat Actors UTA0560 and JungleBamboo Chain Chrome & Windows Zero-Days in Coordinated Campaigns

VolexityHigh

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesHigh

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

The Hacker NewsCritical

Multiple Vulnerabilities in Google Chrome (CVE-2026-87491 et al.)

GovCERT.HK

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans