CVE-2026-8509

HighCVSS 8.8

Published: 14/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

34th percentile - higher than 34% of all known CVEs

Summary

Heap buffer overflow in WebML in Google Chrome prior to version 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Risk Assessment

This vulnerability could lead to remote code execution, posing a significant security risk to systems using this browser.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.

Other vulnerabilities in WebML in Google Chrome

CVE-2026-8531High
Heap buffer overflow in WebML in Google Chrome on Windows prior to version 148.0.7778.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Original NVD description (English source)

Heap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS