CVE-2026-8529
High
Published: 14 May 2026
Published
14 May 2026
Modified
14 May 2026
KEV Added
—
Patch
—
CVSS Score
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
N/A
Risk Priority
18
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2026-8529 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Chromium (inferred from references). Its CVSS base score is 8.8 (High).
Operationally, it is not currently listed in the CISA KEV catalog.
NVD Description
Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: High)
Deeper analysisAI
Automated synthesis unavailable for this CVE.
Details
- CWE(s)
Affected Products
Chromium
—
inferred from references and description; NVD did not file a CPE for this CVE