CVE-2026-8536

LowCVSS 3.1/10Last modified Jun 17, 2026

Description

Insufficient validation of untrusted input in ReadingMode in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to bypass site Isolation via a crafted HTML page. (Chromium security severity: High)

Metrics

CVSS 3.1 3.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
May 14, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-853607.0Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-853617.0Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-853627.0Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.CVE-2026-853638.8Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.CVE-2026-853647.0Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-853657.0Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.CVE-2026-853667.8Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-853677.0Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.CVE-2026-853687.8Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.CVE-2026-853698.2Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.CVE-2026-85374.3Insufficient policy enforcement in ViewTransitions in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin dCVE-2026-853707.0Use after free in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-8536: Low severity, CVSS 3.1 | Vulnix