CVE-2026-8520

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-8520

Google Chrome versions prior to 148.0.7778.168 are vulnerable to a race condition in the Payments component. This flaw stems from synchronization errors when accessing a common resource, which could allow a remote attacker to achieve a sandbox escape by navigating to a crafted HTML page . This is...