PT-2026-41085 · Google · Google Chrome+1

Published 2026-05-12 · Updated 2026-05-16 · CVE-2026-8556

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168

Description An inappropriate implementation in ANGLE (Almost Native Graphics Layer Engine, an abstraction layer that translates WebGL calls to native graphics APIs) allows a remote attacker who has compromised the renderer process to leak cross-origin data using a crafted HTML page.

Recommendations Update to version 148.0.7778.168 or later.

Fix

Buffer Overflow

Improper Access Control

Weakness Enumeration

CWE-119

CWE-284

Related Identifiers

CVE-2026-8556

ECHO-2A7D-334B-3869

OPENSUSE-SU-2026:10786-1

Affected Products

Angle

Google Chrome

References · 86

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-8556 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-8556 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-8556 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10786-1 · Vendor Advisory
• https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-8575 · Note
• https://suse.com/security/cve/CVE-2026-8542 · Note
• https://suse.com/security/cve/CVE-2026-8532 · Note
• https://suse.com/security/cve/CVE-2026-8561 · Note
• https://suse.com/security/cve/CVE-2026-8513 · Note
• https://suse.com/security/cve/CVE-2026-8541 · Note
• https://suse.com/security/cve/CVE-2026-8579 · Note
• https://suse.com/security/cve/CVE-2026-8531 · Note
• https://suse.com/security/cve/CVE-2026-8522 · Note
• https://suse.com/security/cve/CVE-2026-8574 · Note