PT-2026-41114 · Google · Chrome For Ios

Published 2026-05-14 · Updated 2026-05-16 · CVE-2026-8585

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 148.0.7778.168

Description An inappropriate implementation in Media allows a remote attacker who has compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. An out of bounds memory read occurs when the application reads data past the end or before the beginning of the intended memory buffer.

Recommendations Update Google Chrome on iOS to version 148.0.7778.168 or later.

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2026-8585

ECHO-3BF6-5CCE-132A

OPENSUSE-SU-2026:10786-1

Affected Products

Chrome For Ios

References · 90

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-8585 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8585 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-8585 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-8585 · Security Note
• https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10786-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-8584 · Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-8585 · Note
• https://suse.com/security/cve/CVE-2026-8515 · Note
• https://suse.com/security/cve/CVE-2026-8529 · Note
• https://suse.com/security/cve/CVE-2026-8545 · Note
• https://suse.com/security/cve/CVE-2026-8514 · Note
• https://suse.com/security/cve/CVE-2026-8537 · Note
• https://suse.com/security/cve/CVE-2026-8551 · Note
• https://suse.com/security/cve/CVE-2026-8525 · Note