CVE-2026-8527 vulnerabilities

Vulnerabilities for packages: chromium...

Chromium: CVE-2026-8527 Insufficient validation of untrusted input in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-8527

Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-8527

Google Chrome versions prior to 148.0.7778.168 are vulnerable to a high-severity security issue caused by insufficient validation of untrusted input within the Downloads component. A remote attacker can exploit this flaw by using a crafted HTML page to achieve arbitrary code execution . This vuln...