Security Advisory

CVE-2026-8520

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-05-14 19:52:14
Last updated 2026-05-15 03:57:19
Assigner Chrome
State PUBLISHED

Description

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)