CVE-2026-8532
High
Published: 14 May 2026
Published
14 May 2026
Modified
14 May 2026
KEV Added
—
Patch
—
CVSS Score
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
N/A
Risk Priority
18
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2026-8532 is a high-severity External Control of Assumed-Immutable Web Parameter (CWE-472) vulnerability in Chromium (inferred from references). Its CVSS base score is 8.8 (High).
Operationally, it is not currently listed in the CISA KEV catalog.
NVD Description
Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Deeper analysisAI
Automated synthesis unavailable for this CVE.
Details
- CWE(s)
Affected Products
Chromium
—
inferred from references and description; NVD did not file a CPE for this CVE