PT-2026-41049
CVE-2026-8520
·
Published
2026-05-12
·
Updated
2026-08-31
Description by
CVSS 3.1
8.3
HighMetricsAV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 148.0.7778.168
Description
A race condition in the Payments component allows a remote attacker to potentially achieve a sandbox escape by using a specially crafted HTML page. A sandbox escape is a technique used to break out of a restricted environment to gain unauthorized access to the underlying system.
Recommendations
Update to version 148.0.7778.168 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾