Documented CVEs
4 vulnerabilities cataloged in the Hermes intelligence repository.
Google Chromium / V8 — Security Intelligence & Vulnerability Profile
1. Software Identity & Security Posture
Section titled “1. Software Identity & Security Posture”| Parameter | Technical Specification |
|---|---|
| Official Name | Google Chromium / V8 |
| Vendor / Project | google |
| Canonical ID | google:chromium_v8 |
| Versioning Scheme | semver |
| CPE Identifiers | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*cpe:2.3:a:google:v8:*:*:*:*:*:*:*:* |
| Overall Posture | CRITICAL |
| Recommended Safe Release | 128.0.6613.120 |
CISA KEV Entries
2 flaws with confirmed active in-the-wild exploitation.
Weaponized Exploits
4 vulnerabilities with publicly available PoCs or weaponized exploit tooling.
Remediation Target
Recommended upgrade to 128.0.6613.120 to neutralize known flaws.
2. 30-Day Risk Trajectory & Trend Evolution
Section titled “2. 30-Day Risk Trajectory & Trend Evolution”Progression of Hermes Threat Score (HTS) posture and maximum EPSS probability over the last 30 days:
Current HTS Score
0 / 100
= Stable over 30d
Max EPSS (Exploitation)
1.5 %
▲ +1.0 % over 30d
CISA KEV Activity
2
Active in-the-wild exploitation
HTS Trend Curve (D-30 → Today)2026-08-12 → 2026-09-10
3. Vulnerability History & Version Applicability Matrix
Section titled “3. Vulnerability History & Version Applicability Matrix”| CVE | CVSS Score | EPSS Probability | CISA KEV | Affected Versions | Fixed In | Hermes Analysis |
|---|---|---|---|---|---|---|
| CVE-2026-87491 | 9.8 (CRITICAL) | 1.0% | CISA KEV | v128.0.0.0 to v128.0.6613.119 | 128.0.6613.120 | Analysis → |
| CVE-2026-85046 | 8.8 (HIGH) | 1.5% | CISA KEV | v128.0.0.0 to v128.0.6613.119 | 128.0.6613.120 | Analysis → |
| CVE-2026-93372 | 8.8 (HIGH) | 0.4% | No | vAll supported production branches to vGoogle Chrome for Android < 153.0.8010.52 | - | Analysis → |
| CVE-2026-91749 | 8.8 (HIGH) | 0.3% | No | vAll supported production branches to vGoogle Chrome Desktop & Android < 153.0.8010.47 | - | Analysis → |
4. Ransomware & Threat Actor Exposure
Section titled “4. Ransomware & Threat Actor Exposure”Vulnerabilities impacting Google Chromium / V8 are actively leveraged in real-world intrusion campaigns:
- CVE-2026-87491: Known in opportunistic exploitation (Read deep dive analysis)
- CVE-2026-85046: Known in opportunistic exploitation (Read deep dive analysis)
- CVE-2026-93372: Unknown (Read deep dive analysis)
- CVE-2026-91749: Unknown (Read deep dive analysis)
5. Evaluate Running Versions in Interactive Workbench
Section titled “5. Evaluate Running Versions in Interactive Workbench”Are you operating Google Chromium / V8 in your infrastructure? Inspect your running build to evaluate applicability, confidence score, and security deltas:
Launch Software Intelligence Workbench for Google Chromium / V8 Run deterministic in-browser evaluation, calculate HTS threat reduction, and plan your upgrade path.