Chromium: CVE-2026-8549 Use after free in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-8549

Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-8549

A use-after-free vulnerability in the Media component of Google Chrome (prior to version 148.0.7778.168 ) allows a remote attacker to execute arbitrary code inside a sandbox. The flaw is triggered by a specially crafted HTML page and results from the reuse of memory after it has been freed. Impac...