Insufficient Input Validation Vulnerability in ChromeDriver on Google Chrome
CVE-2026-8000

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
6 May 2026

What is CVE-2026-8000?

A vulnerability in ChromeDriver for Google Chrome on Windows prior to version 148.0.7778.96 was identified, allowing a remote attacker to exploit insufficient validation of untrusted input. By crafting a malicious HTML page, an attacker could execute arbitrary code on the user's system, posing significant security risks. It is recommended that users upgrade to the latest version of Google Chrome to mitigate this vulnerability.

Affected Version(s)

Chrome 148.0.7778.96

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.