CVE-2026-8525

8.3

Google · Chrome

A heap buffer overflow in the ANGLE graphics library component of Google Chrome on macOS could lead to arbitrary code execution.

Executive summary

A high-severity heap buffer overflow in Google Chrome on macOS creates an opportunity for remote code execution.

Vulnerability

The vulnerability is a heap buffer overflow within the ANGLE graphics component. It can be triggered by an unauthenticated attacker providing malicious web content to a user.

Business impact

Given the CVSS score of 8.3, this vulnerability is a major threat. Exploitation could allow an attacker to execute arbitrary code, potentially leading to unauthorized access to the underlying macOS environment.

Remediation

Immediate Action: Update Google Chrome on all macOS systems to version 148 or higher.

Proactive Monitoring: Look for unexpected graphics-related browser crashes or abnormal process behavior.

Compensating Controls: Use endpoint security software to monitor for heap-based memory attacks.

Exploitation status

Public Exploit Available: false

Analyst recommendation

Promptly patching Chrome on macOS is essential for maintaining system integrity. Administrators should verify that the latest version is deployed across all endpoints to neutralize this risk.

More Google CVEs