CVE-2026-8002

HighCVSS 8.8

Published: 06/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

A use after free vulnerability in Audio in Google Chrome on Mac prior to version 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Risk Assessment

This vulnerability could lead to the execution of malicious code within the browser context, posing a security risk to users.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.

Other vulnerabilities in Google Chrome on Mac

CVE-2026-7978High
Inappropriate implementation in Companion in Google Chrome on Mac prior to version 148.0.7778.96 allowed a remote attacker to perform OS-level privilege escalation via malicious network traffic.

Original NVD description (English source)

Use after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS