CVE-2026-8573 is an integer overflow vulnerability in the codecs processing of Google Chrome on Windows platforms before version 148.0.7778.168. Exploitation involves a crafted video file that may trigger a sandbox escape, potentially allowing code execution outside the browser's restricted environment. The vulnerability is acknowledged by Google with a medium severity rating, but no CVSS score is assigned. The vendor advisory linked does not specify if an official fix has been released or if a workaround is available.

Successful exploitation could allow a remote attacker to escape the Chrome sandbox, which may lead to execution of arbitrary code with higher privileges than normally permitted within the browser context. This elevates the risk beyond typical browser compromise, potentially affecting system security. However, no active exploitation in the wild has been reported to date.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html for current remediation guidance. Until confirmation of a fix, users should update to Chrome version 148.0.7778.168 or later if available. If no update is available, exercise caution when opening video files from untrusted sources.