Google Chrome (EXE) 148.0.7778.168
Google Chrome (EXE) 148.0.7778.168, released May 12, 2026, fixes 55 CVEs in Google Chrome (EXE). None of them is reported as exploited. Patch Radar priority: Urgent. The latest Google Chrome (EXE) is 157.0.8103.51, which also fixes every one of these CVEs.
Superseded. The latest Google Chrome (EXE) is 157.0.8103.51, which also fixes every CVE on this page. Install that instead.
Priority of the 55 CVEs
Applies to
| Product | Version |
|---|---|
| Google Chrome (EXE) | 148.0.7778.168 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-8510 | Chromium: CVE-2026-8510 Integer overflow in Skia | 9.6 | 0.0995 | None reported |
| Urgent | CVE-2026-8511 | Chromium: CVE-2026-8511 Use after free in UI | 9.6 | 0.0023 | None reported |
| Urgent | CVE-2026-8519 | Chromium: CVE-2026-8519 Integer overflow in ANGLE | 9.6 | 0.0023 | None reported |
| Urgent | CVE-2026-8580 | Chromium: CVE-2026-8580 Use after free in Mojo | 9.6 | 0.0021 | None reported |
| Urgent | CVE-2026-8556 | Chromium: CVE-2026-8556 Inappropriate implementation in ANGLE | 9.6 | 0.0020 | None reported |
| Urgent | CVE-2026-8567 | Chromium: CVE-2026-8567 Integer overflow in ANGLE | 9.6 | 0.0018 | None reported |
| Urgent | CVE-2026-8554 | Chromium: CVE-2026-8554 Type Confusion in ANGLE | 9.6 | 0.0017 | None reported |
| Urgent | CVE-2026-8579 | Chromium: CVE-2026-8579 Insufficient validation of untrusted input in Skia | 9.6 | 0.0014 | None reported |
| High | CVE-2026-8509 | Chromium: CVE-2026-8509 Heap buffer overflow in WebML | 8.8 | 0.0040 | None reported |
| High | CVE-2026-8524 | Chromium: CVE-2026-8524 Out of bounds write in WebAudio | 8.8 | 0.0038 | None reported |
| High | CVE-2026-8526 | Chromium: CVE-2026-8526 Out of bounds write in WebRTC | 8.8 | 0.0038 | None reported |
| High | CVE-2026-8558 | Chromium: CVE-2026-8558 Out of bounds write in Fonts | 8.8 | 0.0031 | None reported |
| High | CVE-2026-8540 | Chromium: CVE-2026-8540 Type Confusion in V8 | 8.8 | 0.0031 | None reported |
| High | CVE-2026-8529 | Chromium: CVE-2026-8529 Heap buffer overflow in Codecs | 8.8 | 0.0030 | None reported |
| High | CVE-2026-8527 | Chromium: CVE-2026-8527 Insufficient validation of untrusted input in Downloads | 8.8 | 0.0029 | None reported |
| High | CVE-2026-8518 | Chromium: CVE-2026-8518 Use after free in Blink | 8.8 | 0.0028 | None reported |
| High | CVE-2026-8532 | Chromium: CVE-2026-8532 Integer overflow in XML | 8.8 | 0.0028 | None reported |
| High | CVE-2026-8544 | Chromium: CVE-2026-8544 Use after free in Media | 8.8 | 0.0028 | None reported |
| High | CVE-2026-8549 | Chromium: CVE-2026-8549 Use after free in Media | 8.8 | 0.0028 | None reported |
| High | CVE-2026-8551 | Chromium: CVE-2026-8551 Use after free in Downloads | 8.8 | 0.0028 | None reported |
| High | CVE-2026-8555 | Chromium: CVE-2026-8555 Use after free in GTK | 8.8 | 0.0028 | None reported |
| High | CVE-2026-8530 | Chromium: CVE-2026-8530 Use after free in Network | 8.3 | 0.0027 | None reported |
| High | CVE-2026-8581 | Chromium: CVE-2026-8581 Use after free in GPU | 8.8 | 0.0026 | None reported |
| High | CVE-2026-8531 | Chromium: CVE-2026-8531 Heap buffer overflow in WebML | 8.8 | 0.0026 | None reported |
| High | CVE-2026-8547 | Chromium: CVE-2026-8547 Insufficient policy enforcement in Passwords | 7.5 | 0.0026 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.