Use After Free Vulnerability in Google Chrome Web Browser
CVE-2026-8581

8.8HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
14 May 2026

What is CVE-2026-8581?

A Use After Free vulnerability exists in the GPU component of Google Chrome, impacting versions prior to 148.0.7778.168. This flaw can be exploited by remote attackers through specially crafted HTML pages, enabling them to execute arbitrary code within the sandboxed environment of the browser. Such vulnerabilities highlight the necessity for users to keep their browsers updated to the latest versions to mitigate potential security threats.

Affected Version(s)

Chrome 148.0.7778.168

References

https://chromereleases.googleblog.com/2026/05/stable-chan...
https://issues.chromium.org/issues/497292072

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.