CVE-2026-8512: Use after free in FileSystem
Chromium: CVE-2026-8512 Use after free in FileSystem
Other sources
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information
— Microsoft
Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
— NVD
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 148.0.7778.167 - Upgrade
Upgrade
Google Chrome (Chromium-based) / Microsoft Edge (Chromium-based)to a version that resolves this vulnerability.Fixed in 148.0.7778.168 - Compensating control
Mitigate the risk by preventing untrusted users from inducing UI gestures in the browser (e.g., restrict exposure to malicious pages and limit browsing to trusted sources until patched).
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-8509
- CVE-2026-8510
- CVE-2026-8511
- CVE-2026-8513
- CVE-2026-8514
- CVE-2026-8515
- CVE-2026-8516
- CVE-2026-8517
- CVE-2026-8518
- CVE-2026-8519
- CVE-2026-8520
- CVE-2026-8521
- CVE-2026-8522
- CVE-2026-8523
- CVE-2026-8558
- CVE-2026-8524
- CVE-2026-8525
- CVE-2026-8526
- CVE-2026-8527
- CVE-2026-8529
- CVE-2026-8530
- CVE-2026-8531
- CVE-2026-8532
- CVE-2026-8533
- CVE-2026-8534
- CVE-2026-8535
- CVE-2026-8536
- CVE-2026-8537
- CVE-2026-8538
- CVE-2026-8539
- CVE-2026-8540
- CVE-2026-8541
- CVE-2026-8542
- CVE-2026-8543
- CVE-2026-8544
- CVE-2026-8545
- CVE-2026-8546
- CVE-2026-8547
- CVE-2026-8548
- CVE-2026-8549
- CVE-2026-8550
- CVE-2026-8551
- CVE-2026-8552
- CVE-2026-8553
- CVE-2026-8554
- CVE-2026-8555
- CVE-2026-8556
- CVE-2026-8557
- CVE-2026-8559
- CVE-2026-8528
- CVE-2026-8560
- CVE-2026-8561
- CVE-2026-8562
- CVE-2026-8563
- CVE-2026-8564
- CVE-2026-8565
- CVE-2026-8566
- CVE-2026-8567
- CVE-2026-8569
- CVE-2026-8570
- CVE-2026-8571
- CVE-2026-8572
- CVE-2026-8573
- CVE-2026-8574
- CVE-2026-8575
- CVE-2026-8576
- CVE-2026-8577
- CVE-2026-8578
- CVE-2026-8579
- CVE-2026-8580
- CVE-2026-8581
- CVE-2026-8582
- CVE-2026-8583
- CVE-2026-8584
- CVE-2026-8585
- CVE-2026-8586
- CVE-2026-8587
Frequently Asked Questions
What is the severity of CVE-2026-8512?
CVE-2026-8512 is considered a high-severity vulnerability due to the potential for exploitation through use after free in the FileSystem.
How do I fix CVE-2026-8512?
To mitigate CVE-2026-8512, update Google Chrome to version 148.0.7778.167 or later, or update Microsoft Edge (Chromium-based) to the latest version.
Which versions of Chrome are affected by CVE-2026-8512?
Google Chrome versions before 148.0.7778.167 are affected by CVE-2026-8512.
Is Microsoft Edge affected by CVE-2026-8512?
Yes, Microsoft Edge (Chromium-based) is affected by CVE-2026-8512 if it is running a version prior to the latest security update.
What kind of vulnerability is CVE-2026-8512?
CVE-2026-8512 is a use after free vulnerability found in the FileSystem of Chromium-based browsers.