CVE-2026-8531

HighCVSS 8.8

Published: 14/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

Heap buffer overflow in WebML in Google Chrome on Windows prior to version 148.0.7778.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Risk Assessment

An attacker could exploit this vulnerability to execute remote code, posing a serious security risk to user systems.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.

Other vulnerabilities in WebML in Google Chrome

CVE-2026-8509High
Heap buffer overflow in WebML in Google Chrome prior to version 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Original NVD description (English source)

Heap buffer overflow in WebML in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS