Vulnerability-Lookup

CERTFR-2026-AVI-0574

Vulnerability from certfr_avis - Published: 2026-05-13 - Updated: 2026-05-19

De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Google	Chrome	Chrome versions antérieures à 148.0.7778.167 pour Window
Google	Chrome	Chrome versions antérieures à 148.0.7778.168 pour Mac
Google	Chrome	Chrome versions antérieures à 148.0.7778.167 pour Linux

References

Title

Publication Time

Tags

Bulletin de sécurité Google Chrome

2026-05-12

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 148.0.7778.167 pour Window",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    },
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 148.0.7778.168 pour Mac",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    },
    {
      "description": "Chrome versions ant\u00e9rieures \u00e0 148.0.7778.167 pour Linux",
      "product": {
        "name": "Chrome",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-8554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8554"
    },
    {
      "name": "CVE-2026-8559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8559"
    },
    {
      "name": "CVE-2026-8547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8547"
    },
    {
      "name": "CVE-2026-8542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8542"
    },
    {
      "name": "CVE-2026-8562",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8562"
    },
    {
      "name": "CVE-2026-8513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8513"
    },
    {
      "name": "CVE-2026-8560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8560"
    },
    {
      "name": "CVE-2026-8534",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8534"
    },
    {
      "name": "CVE-2026-8531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8531"
    },
    {
      "name": "CVE-2026-8578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8578"
    },
    {
      "name": "CVE-2026-8565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8565"
    },
    {
      "name": "CVE-2026-8520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8520"
    },
    {
      "name": "CVE-2026-8536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8536"
    },
    {
      "name": "CVE-2026-8587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8587"
    },
    {
      "name": "CVE-2026-8571",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8571"
    },
    {
      "name": "CVE-2026-8556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8556"
    },
    {
      "name": "CVE-2026-8543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8543"
    },
    {
      "name": "CVE-2026-8557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8557"
    },
    {
      "name": "CVE-2026-8538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8538"
    },
    {
      "name": "CVE-2026-8526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8526"
    },
    {
      "name": "CVE-2026-8523",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8523"
    },
    {
      "name": "CVE-2026-8549",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8549"
    },
    {
      "name": "CVE-2026-8530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8530"
    },
    {
      "name": "CVE-2026-8541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8541"
    },
    {
      "name": "CVE-2026-8535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8535"
    },
    {
      "name": "CVE-2026-8515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8515"
    },
    {
      "name": "CVE-2026-8583",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8583"
    },
    {
      "name": "CVE-2026-8533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8533"
    },
    {
      "name": "CVE-2026-8585",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8585"
    },
    {
      "name": "CVE-2026-8527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8527"
    },
    {
      "name": "CVE-2026-8584",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8584"
    },
    {
      "name": "CVE-2026-8517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8517"
    },
    {
      "name": "CVE-2026-8579",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8579"
    },
    {
      "name": "CVE-2026-8573",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8573"
    },
    {
      "name": "CVE-2026-8569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8569"
    },
    {
      "name": "CVE-2026-8545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8545"
    },
    {
      "name": "CVE-2026-8529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8529"
    },
    {
      "name": "CVE-2026-8561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8561"
    },
    {
      "name": "CVE-2026-8546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8546"
    },
    {
      "name": "CVE-2026-8522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8522"
    },
    {
      "name": "CVE-2026-8544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8544"
    },
    {
      "name": "CVE-2026-8540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8540"
    },
    {
      "name": "CVE-2026-8555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8555"
    },
    {
      "name": "CVE-2026-8528",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8528"
    },
    {
      "name": "CVE-2026-8570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8570"
    },
    {
      "name": "CVE-2026-8512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8512"
    },
    {
      "name": "CVE-2026-8553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8553"
    },
    {
      "name": "CVE-2026-8566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8566"
    },
    {
      "name": "CVE-2026-8551",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8551"
    },
    {
      "name": "CVE-2026-8577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8577"
    },
    {
      "name": "CVE-2026-8539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8539"
    },
    {
      "name": "CVE-2026-8525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8525"
    },
    {
      "name": "CVE-2026-8563",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8563"
    },
    {
      "name": "CVE-2026-8514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8514"
    },
    {
      "name": "CVE-2026-8509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8509"
    },
    {
      "name": "CVE-2026-8521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8521"
    },
    {
      "name": "CVE-2026-8524",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8524"
    },
    {
      "name": "CVE-2026-8558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8558"
    },
    {
      "name": "CVE-2026-8564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8564"
    },
    {
      "name": "CVE-2026-8580",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8580"
    },
    {
      "name": "CVE-2026-8516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8516"
    },
    {
      "name": "CVE-2026-8567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8567"
    },
    {
      "name": "CVE-2026-8510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8510"
    },
    {
      "name": "CVE-2026-8576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8576"
    },
    {
      "name": "CVE-2026-8568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8568"
    },
    {
      "name": "CVE-2026-8582",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8582"
    },
    {
      "name": "CVE-2026-8518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8518"
    },
    {
      "name": "CVE-2026-8586",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8586"
    },
    {
      "name": "CVE-2026-8575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8575"
    },
    {
      "name": "CVE-2026-8572",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8572"
    },
    {
      "name": "CVE-2026-8548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8548"
    },
    {
      "name": "CVE-2026-8532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8532"
    },
    {
      "name": "CVE-2026-8574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8574"
    },
    {
      "name": "CVE-2026-8581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8581"
    },
    {
      "name": "CVE-2026-8537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8537"
    },
    {
      "name": "CVE-2026-8519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8519"
    },
    {
      "name": "CVE-2026-8550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8550"
    },
    {
      "name": "CVE-2026-8511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8511"
    },
    {
      "name": "CVE-2026-8552",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8552"
    }
  ],
  "initial_release_date": "2026-05-13T00:00:00",
  "last_revision_date": "2026-05-19T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0574",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-05-13T00:00:00.000000"
    },
    {
      "description": "Ajout des vuln\u00e9rabilit\u00e9s de l\u0027avis \u00e9diteur",
      "revision_date": "2026-05-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
  "vendor_advisories": [
    {
      "published_at": "2026-05-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Google Chrome",
      "url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
    }
  ]
}

CVE-2026-8509 (GCVE-0-2026-8509)

Vulnerability from cvelistv5 – Published: 2026-05-14 19:52 – Updated: 2026-05-15 03:56

Summary

Heap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

Severity ?

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-122 - Heap buffer overflow

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/05/sta…
https://issues.chromium.org/issues/493310462

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 148.0.7778.168 , < 148.0.7778.168 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-8509",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-14T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T03:56:36.011Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "148.0.7778.168",
              "status": "affected",
              "version": "148.0.7778.168",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap buffer overflow",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-14T19:52:09.937Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
        },
        {
          "url": "https://issues.chromium.org/issues/493310462"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-8509",
    "datePublished": "2026-05-14T19:52:09.937Z",
    "dateReserved": "2026-05-14T05:40:09.815Z",
    "dateUpdated": "2026-05-15T03:56:36.011Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8510 (GCVE-0-2026-8510)

Vulnerability from cvelistv5 – Published: 2026-05-14 19:52 – Updated: 2026-05-15 03:57

Summary

Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Severity ?

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-472 - Integer overflow

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/05/sta…
https://issues.chromium.org/issues/502636904

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 148.0.7778.168 , < 148.0.7778.168 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-8510",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-14T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T03:57:26.849Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "148.0.7778.168",
              "status": "affected",
              "version": "148.0.7778.168",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-472",
              "description": "Integer overflow",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-14T19:52:10.435Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
        },
        {
          "url": "https://issues.chromium.org/issues/502636904"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-8510",
    "datePublished": "2026-05-14T19:52:10.435Z",
    "dateReserved": "2026-05-14T05:40:10.193Z",
    "dateUpdated": "2026-05-15T03:57:26.849Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8511 (GCVE-0-2026-8511)

Vulnerability from cvelistv5 – Published: 2026-05-14 19:52 – Updated: 2026-05-15 03:56

Summary

Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Severity ?

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/05/sta…
https://issues.chromium.org/issues/495108488

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 148.0.7778.168 , < 148.0.7778.168 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.6,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-8511",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-14T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T03:56:52.134Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "148.0.7778.168",
              "status": "affected",
              "version": "148.0.7778.168",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-14T19:52:10.918Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
        },
        {
          "url": "https://issues.chromium.org/issues/495108488"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-8511",
    "datePublished": "2026-05-14T19:52:10.918Z",
    "dateReserved": "2026-05-14T05:40:10.520Z",
    "dateUpdated": "2026-05-15T03:56:52.134Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8512 (GCVE-0-2026-8512)

Vulnerability from cvelistv5 – Published: 2026-05-14 19:52 – Updated: 2026-05-15 03:56

Summary

Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Severity ?

8.3 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/05/sta…
https://issues.chromium.org/issues/495782021

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 148.0.7778.168 , < 148.0.7778.168 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.3,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-8512",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-14T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T03:56:53.683Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "148.0.7778.168",
              "status": "affected",
              "version": "148.0.7778.168",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-14T19:52:11.336Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
        },
        {
          "url": "https://issues.chromium.org/issues/495782021"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-8512",
    "datePublished": "2026-05-14T19:52:11.336Z",
    "dateReserved": "2026-05-14T05:40:10.867Z",
    "dateUpdated": "2026-05-15T03:56:53.683Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8513 (GCVE-0-2026-8513)

Vulnerability from cvelistv5 – Published: 2026-05-14 19:52 – Updated: 2026-05-15 03:56

Summary

Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Severity ?

8.3 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/05/sta…
https://issues.chromium.org/issues/495939973

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 148.0.7778.168 , < 148.0.7778.168 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.3,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-8513",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-14T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T03:56:55.205Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "148.0.7778.168",
              "status": "affected",
              "version": "148.0.7778.168",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-14T19:52:11.781Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
        },
        {
          "url": "https://issues.chromium.org/issues/495939973"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-8513",
    "datePublished": "2026-05-14T19:52:11.781Z",
    "dateReserved": "2026-05-14T05:40:11.173Z",
    "dateUpdated": "2026-05-15T03:56:55.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8514 (GCVE-0-2026-8514)

Vulnerability from cvelistv5 – Published: 2026-05-14 19:52 – Updated: 2026-05-15 03:56

Summary

Use after free in Aura in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Severity ?

8.3 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/05/sta…
https://issues.chromium.org/issues/495948109

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 148.0.7778.168 , < 148.0.7778.168 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.3,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-8514",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-14T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T03:56:56.749Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "148.0.7778.168",
              "status": "affected",
              "version": "148.0.7778.168",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in Aura in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-14T19:52:12.496Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
        },
        {
          "url": "https://issues.chromium.org/issues/495948109"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-8514",
    "datePublished": "2026-05-14T19:52:12.496Z",
    "dateReserved": "2026-05-14T05:40:11.408Z",
    "dateUpdated": "2026-05-15T03:56:56.749Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8515 (GCVE-0-2026-8515)

Vulnerability from cvelistv5 – Published: 2026-05-14 19:52 – Updated: 2026-05-15 03:56

Summary

Use after free in HID in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Severity ?

8.3 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/05/sta…
https://issues.chromium.org/issues/495999127

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 148.0.7778.168 , < 148.0.7778.168 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.3,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-8515",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-14T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T03:56:58.251Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "148.0.7778.168",
              "status": "affected",
              "version": "148.0.7778.168",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in HID in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-14T19:52:12.912Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
        },
        {
          "url": "https://issues.chromium.org/issues/495999127"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-8515",
    "datePublished": "2026-05-14T19:52:12.912Z",
    "dateReserved": "2026-05-14T05:40:11.666Z",
    "dateUpdated": "2026-05-15T03:56:58.251Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8516 (GCVE-0-2026-8516)

Vulnerability from cvelistv5 – Published: 2026-05-14 19:52 – Updated: 2026-05-14 21:33

Summary

Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Critical)

Severity ?

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

CWE-20 - Insufficient validation of untrusted input

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/05/sta…
https://issues.chromium.org/issues/496393078

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 148.0.7778.168 , < 148.0.7778.168 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-8516",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-14T21:33:32.762377Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-14T21:33:49.533Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "148.0.7778.168",
              "status": "affected",
              "version": "148.0.7778.168",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "Insufficient validation of untrusted input",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-14T19:52:13.261Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
        },
        {
          "url": "https://issues.chromium.org/issues/496393078"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-8516",
    "datePublished": "2026-05-14T19:52:13.261Z",
    "dateReserved": "2026-05-14T05:40:11.943Z",
    "dateUpdated": "2026-05-14T21:33:49.533Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8517 (GCVE-0-2026-8517)

Vulnerability from cvelistv5 – Published: 2026-05-14 19:52 – Updated: 2026-05-14 20:44

Summary

Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

Severity ?

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Object lifecycle issue

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/05/sta…
https://issues.chromium.org/issues/497531263

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 148.0.7778.168 , < 148.0.7778.168 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-8517",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-14T20:44:32.267007Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-664",
                "description": "CWE-664 Improper Control of a Resource Through its Lifetime",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-14T20:44:55.382Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "148.0.7778.168",
              "status": "affected",
              "version": "148.0.7778.168",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Object lifecycle issue",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-14T19:52:13.680Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
        },
        {
          "url": "https://issues.chromium.org/issues/497531263"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-8517",
    "datePublished": "2026-05-14T19:52:13.680Z",
    "dateReserved": "2026-05-14T05:40:12.153Z",
    "dateUpdated": "2026-05-14T20:44:55.382Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8518 (GCVE-0-2026-8518)

Vulnerability from cvelistv5 – Published: 2026-05-14 19:52 – Updated: 2026-05-15 03:56

Summary

Use after free in Blink in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

Severity ?

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/05/sta…
https://issues.chromium.org/issues/497830330

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 148.0.7778.168 , < 148.0.7778.168 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-8518",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-14T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T03:56:34.545Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "148.0.7778.168",
              "status": "affected",
              "version": "148.0.7778.168",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in Blink in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-14T19:52:14.023Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html"
        },
        {
          "url": "https://issues.chromium.org/issues/497830330"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-8518",
    "datePublished": "2026-05-14T19:52:14.023Z",
    "dateReserved": "2026-05-14T05:40:12.377Z",
    "dateUpdated": "2026-05-15T03:56:34.545Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTFR-2026-AVI-0574

Solutions

CVE-2026-8509 (GCVE-0-2026-8509)

CVE-2026-8510 (GCVE-0-2026-8510)

CVE-2026-8511 (GCVE-0-2026-8511)

CVE-2026-8512 (GCVE-0-2026-8512)

CVE-2026-8513 (GCVE-0-2026-8513)

CVE-2026-8514 (GCVE-0-2026-8514)

CVE-2026-8515 (GCVE-0-2026-8515)

CVE-2026-8516 (GCVE-0-2026-8516)

CVE-2026-8517 (GCVE-0-2026-8517)

CVE-2026-8518 (GCVE-0-2026-8518)

Tags

Sightings

Nomenclature