CVE-2026-8559: Integer overflow in Google Chrome
Integer overflow in Internationalization in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
AI Analysis
Technical Summary
An integer overflow vulnerability exists in the Internationalization feature of Google Chrome on Windows platforms before version 148.0.7778.168. This vulnerability enables a remote attacker to trigger an out of bounds memory write via a crafted HTML page, potentially leading to memory corruption. The issue is recognized as high severity by the Chromium security team. The vulnerability is addressed in Chrome version 148.0.7778.168. No CVSS score is provided, and no public exploits are known.
Potential Impact
Successful exploitation of this vulnerability could allow a remote attacker to write outside the bounds of allocated memory, which may lead to memory corruption and potentially enable arbitrary code execution or browser compromise. However, no known exploits have been reported in the wild. The impact is considered high severity by the vendor.
Mitigation Recommendations
Users should update Google Chrome on Windows to version 148.0.7778.168 or later to remediate this vulnerability. The vendor advisory confirms that this version contains the fix. No additional mitigation steps are indicated.
CVE-2026-8559: Integer overflow in Google Chrome
Description
Integer overflow in Internationalization in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
An integer overflow vulnerability exists in the Internationalization feature of Google Chrome on Windows platforms before version 148.0.7778.168. This vulnerability enables a remote attacker to trigger an out of bounds memory write via a crafted HTML page, potentially leading to memory corruption. The issue is recognized as high severity by the Chromium security team. The vulnerability is addressed in Chrome version 148.0.7778.168. No CVSS score is provided, and no public exploits are known.
Potential Impact
Successful exploitation of this vulnerability could allow a remote attacker to write outside the bounds of allocated memory, which may lead to memory corruption and potentially enable arbitrary code execution or browser compromise. However, no known exploits have been reported in the wild. The impact is considered high severity by the vendor.
Mitigation Recommendations
Users should update Google Chrome on Windows to version 148.0.7778.168 or later to remediate this vulnerability. The vendor advisory confirms that this version contains the fix. No additional mitigation steps are indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Chrome
- Date Reserved
- 2026-05-14T05:40:22.074Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html","vendor":"Google"}]
Threat ID: 6a062b64ec166c07b00ded8f
Added to database: 5/14/2026, 8:07:00 PM
Last enriched: 5/14/2026, 8:37:41 PM
Last updated: 5/15/2026, 6:26:21 AM
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.