CVE-2026-8567

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Medium)

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-472

Affected software

No affected versions have been published.

Timeline

Published
May 14, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-856706.5tokenizers (Hugging Face) is affected by an out-of-bounds buffer access in BpeBuilder::build (tokenizers/src/models/bpe/model.rs). When loadCVE-2026-856717.5QAnything 2.0.0 contains an authentication bypass vulnerability in the /api/local_doc_qa/get_file_base64 and /api/local_doc_qa/get_doc endpoCVE-2026-856729.8zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derived from dCVE-2026-856737.5LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL handler that allows unaCVE-2026-856747.8aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A craftedCVE-2026-856757.5OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content tool that fetches calleCVE-2026-856764.3Dub contains an open redirect vulnerability in the redir_url query parameter that is accepted on every short link without validation or domaCVE-2026-856778.8The Gutenverse News WordPress plugin before 3.3.3 does not restrict the extra HTML it adds to WordPress's allowed elements to the context iCVE-2026-856786.8The AI Builder WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it inside a script tagCVE-2026-856797.2The Extendify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'styles.blocks' Block Type Key in all versions up to, anCVE-2026-856808.8The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user supplied profile names before outputting it inCVE-2026-856819.8The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it makes available to una
CVE-2026-8567: Medium severity, CVSS 4.3 | Vulnix