CVE-2026-8525 - AskarLabs CVE Database

CVE-2026-8525

Vendor Google

Product Chrome

Weakness CWE-122

Published May 14, 2026

Last update May 15, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Key dates

02Disclosure timeline

May 14, 2026 CVE published

May 15, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-8525 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/122.html

Related vulnerabilities

04Related CVE

CVE-2025-2754 Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflow CVE-2024-37331 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability CVE-2025-21246 Windows Telephony Service Remote Code Execution Vulnerability CVE-2024-13050 Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-3791 symisc UnQLite unqlite.c jx9MemObjStore heap-based overflow