Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Medium)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-05-14 | 2 | Disclosure2 |
| 2026-05-15 | 1 | General1 |
We have just added an important vulnerability affecting Google Chrome (CVE-2026-8587) https://vuldb.com/vuln/364090
Post summary
A brief notice that an important Chrome vulnerability (CVE-2026-8587) was added, lacking technical details or additional context.
CVE-2026-8587 Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to execute arbitr… https://www.cve.org/CVERecord?id=CVE-2026-8587
Post summary
The post announces CVE‑2026‑8587, describing a use‑after‑free flaw in Google Chrome extensions on macOS, but offers no PoC, patch, or evidence of active exploitation.
CVE-2026-8587 Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome E... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8587
Post summary
CVE-2026-8587 is a use‑after‑free flaw in Chrome Extensions on macOS that permits arbitrary code execution when a user installs a malicious extension, as noted in the release notes for earlier Chrome versions.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |
| App | chrome | - | - | - |