CVE-2026-8577Disclosure(google / chrome)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Integer overflow in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-472

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome

Threat summary

  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-05-14); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
Products
chrome

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-05-14: 1Mentions · 2026-05-15: 1Mentions · 2026-05-27: 1Technical Details · 2026-05-14: 1Technical Details · 2026-05-15: 1Technical Details · 2026-05-27: 105-1405-1505-27
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-05-141
Disclosure1
2026-05-151
General1
2026-05-271
Disclosure1
Full discourse3 posts
  • IntegSec@integ_sec
    Disclosure

    CVE-2026-8577: Google Chrome Fonts Integer Overflow Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04j0gB00

    Post summary

    The text announces CVE-2026-8577, an integer overflow bug in Google Chrome, and indicates it will discuss business implications and response actions, but offers no proof of exploitation, PoC, or active attacks.

    0000044
    31 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-8577 Integer Overflow in Google Chrome Fonts Prior to 148.0.7778.168 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8577

    Post summary

    The post announces an integer overflow vulnerability in Chrome fonts before version 148.0.7778.168, with a link to a Vulmon entry but without details on exploits, patches, or PoC.

    0000083
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-8577 Integer overflow in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromi… https://www.cve.org/CVERecord?id=CVE-2026-8577

    Post summary

    The text announces CVE-2026-8577, detailing an integer overflow in Chrome's font handling that allows remote code execution through a crafted HTML page.

    00000193
    57.5K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appgooglechrome---

Explore more