CVE-2026-8581Disclosure(google / chrome)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

google CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

chrome

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-05-14); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

google

Products

chrome

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-14	2	Disclosure2
2026-05-15	1	General1
2026-05-29	1	Disclosure1

Full discourse4 posts

Vulmon Vulnerability Feed@VulmonFeeds146d
Disclosure
CVE-2026-8581 Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8581
Post summary
The post simply announces a use-after-free vulnerability in Chrome’s GPU that allows arbitrary code execution via crafted HTML, but does not provide a PoC, patch, or evidence of active exploitation.
0101075
4.0K followersView on X
IntegSec@integ_sec132d
Disclosure
CVE-2026-8581: Google Chrome GPU Use-After-Free Bug — What It Means for Your Business and How to Respond https://hubs.li/Q04jlPrB0
Post summary
The headline announces a new GPU use‑after‑free vulnerability in Google Chrome (CVE‑2026‑8581), providing the type of flaw but no PoC or exploitation details.
0000074
31 followersView on X
VulDB 🛡@vuldb146d
General
The severity is increased for this new vulnerability affecting Google Chrome (CVE-2026-8581) https://vuldb.com/vuln/364084
Post summary
A brief mention of a new Chrome vulnerability with increased severity; no further technical or exploit details provided.
0000065
2.2K followersView on X
CVE@CVEnew146d
Disclosure
CVE-2026-8581 Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s… https://www.cve.org/CVERecord?id=CVE-2026-8581
Post summary
CVE-2026-8581 is a GPU use‑after‑free vulnerability in Google Chrome that allows remote code execution inside a sandbox through a crafted HTML page; no PoC, exploit, active use, patch, or debunking claims are noted.
00000190
57.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	google	chrome	-	-	-

Explore more

Back to dashboard google CVEs chrome vulnerabilities

What researchers are saying

CVE-2026-8581

IntegSec[verified]@integ_secDisclosure

The headline announces a new GPU use‑after‑free vulnerability in Google Chrome (CVE‑2026‑8581), providing the type of flaw but no PoC or exploitation details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post simply announces a use-after-free vulnerability in Chrome’s GPU that allows arbitrary code execution via crafted HTML, but does not provide a PoC, patch, or evidence of active exploitation.

VulDB 🛡@vuldbGeneral

A brief mention of a new Chrome vulnerability with increased severity; no further technical or exploit details provided.

CVE@CVEnewDisclosure

CVE-2026-8581 is a GPU use‑after‑free vulnerability in Google Chrome that allows remote code execution inside a sandbox through a crafted HTML page; no PoC, exploit, active use, patch, or debunking claims are noted.