CVE-2026-8529 - AskarLabs CVE Database

CVE-2026-8529

Vendor Google

Product Chrome

Weakness CWE-122

Published May 14, 2026

Last update May 15, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: High)

Key dates

02Disclosure timeline

May 14, 2026 CVE published

May 15, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-8529 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/122.html

Related vulnerabilities

04Related CVE

CVE-2025-61820 Illustrator | Heap-based Buffer Overflow (CWE-122) CVE-2024-7545 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability CVE-2024-37333 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability CVE-2024-1062 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) CVE-2026-21494 iccDEV has heap buffer overflow in CIccTagLut8::Validate()