CVE-2026-8511: Use after free in UI
Chromium: CVE-2026-8511 Use after free in UI
Other sources
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information
— Microsoft
Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
— NVD
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 148.0.7778.167 - Upgrade
Upgrade
Google Chrome / Chromiumto a version that resolves this vulnerability.Fixed in 148.0.7778.168Patch CVE-2026-8511 - Compensating control
To mitigate exploitation while updating, avoid opening untrusted or crafted HTML pages in Google Chrome/Chromium-based browsers.
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-8509
- CVE-2026-8510
- CVE-2026-8512
- CVE-2026-8513
- CVE-2026-8514
- CVE-2026-8515
- CVE-2026-8516
- CVE-2026-8517
- CVE-2026-8518
- CVE-2026-8519
- CVE-2026-8520
- CVE-2026-8521
- CVE-2026-8522
- CVE-2026-8523
- CVE-2026-8558
- CVE-2026-8524
- CVE-2026-8525
- CVE-2026-8526
- CVE-2026-8527
- CVE-2026-8529
- CVE-2026-8530
- CVE-2026-8531
- CVE-2026-8532
- CVE-2026-8533
- CVE-2026-8534
- CVE-2026-8535
- CVE-2026-8536
- CVE-2026-8537
- CVE-2026-8538
- CVE-2026-8539
- CVE-2026-8540
- CVE-2026-8541
- CVE-2026-8542
- CVE-2026-8543
- CVE-2026-8544
- CVE-2026-8545
- CVE-2026-8546
- CVE-2026-8547
- CVE-2026-8548
- CVE-2026-8549
- CVE-2026-8550
- CVE-2026-8551
- CVE-2026-8552
- CVE-2026-8553
- CVE-2026-8554
- CVE-2026-8555
- CVE-2026-8556
- CVE-2026-8557
- CVE-2026-8559
- CVE-2026-8528
- CVE-2026-8560
- CVE-2026-8561
- CVE-2026-8562
- CVE-2026-8563
- CVE-2026-8564
- CVE-2026-8565
- CVE-2026-8566
- CVE-2026-8567
- CVE-2026-8569
- CVE-2026-8570
- CVE-2026-8571
- CVE-2026-8572
- CVE-2026-8573
- CVE-2026-8574
- CVE-2026-8575
- CVE-2026-8576
- CVE-2026-8577
- CVE-2026-8578
- CVE-2026-8579
- CVE-2026-8580
- CVE-2026-8581
- CVE-2026-8582
- CVE-2026-8583
- CVE-2026-8584
- CVE-2026-8585
- CVE-2026-8586
- CVE-2026-8587
Frequently Asked Questions
What is the severity of CVE-2026-8511?
CVE-2026-8511 is classified as a high-severity vulnerability due to its potential to allow unauthorized access and control over affected systems.
How do I fix CVE-2026-8511?
To mitigate CVE-2026-8511, update Google Chrome to version 148.0.7778.167 or later, and update Microsoft Edge (Chromium-based) as per the vendor's security guidelines.
What are the affected versions for CVE-2026-8511?
CVE-2026-8511 affects Google Chrome versions prior to 148.0.7778.167 and Microsoft Edge (Chromium-based) versions prior to the security updates provided by Microsoft.
Is CVE-2026-8511 present in Microsoft Edge?
Yes, CVE-2026-8511 impacts Microsoft Edge (Chromium-based) as it uses the Chromium engine that contains this vulnerability.
When was CVE-2026-8511 disclosed?
CVE-2026-8511 was disclosed in May 2026 according to the details released by Google Chrome.