8.8 HighCWE-122
CVE-2026-8509
Google Chrome vulnerability
GoogleChrome
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.5%probability of exploitation in the next 30 days
Higher than 44% of scored CVEs
SeverityCVSS
8.8High
Description NVD
Heap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)
Coverage 1 article · 1 outlet
- Chrome 148 fixes 79 flaws, two critical bugs earn $68k bounties.SecurityWeek · first in our coverage