CVE-2026-8509

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168

Description A heap buffer overflow in WebML allows a remote attacker to execute arbitrary code inside a sandbox by using a crafted HTML page. A heap buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold, potentially overwriting adjacent memory.

Recommendations Update to version 148.0.7778.168 or later.