# CVE-2026-8534: Google Chrome integer overflow in GPU component

Source: https://junglewise.ai/threats/cve-2026-8534-google-chrome-integer-overflow-in-gpu-component  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-14. Updated: 2026-05-19  
License: CC BY 4.0 with a link back

CVE-2026-8534 · Severity: high · CVSS 8.3 · Published 2026-05-14

A security vulnerability exists in the graphics processing component of Google Chrome and ChromeOS. An attacker could use a specially crafted website to break out of the browser's security sandbox, potentially gaining control over the underlying operating system. This could lead to the theft of sensitive data or the installation of malicious software on the user's device.

Technologies: [Google Chrome](https://junglewise.ai/threats/technologies/chrome), [Google Chrome Os](https://junglewise.ai/threats/technologies/chrome-os), [Google ChromeOS](https://junglewise.ai/threats/technologies/chromeos), [Linux Kernel](https://junglewise.ai/threats/technologies/kernel). Vendors: [Google](https://junglewise.ai/threats/vendors/google), [Linux](https://junglewise.ai/threats/vendors/linux).

## Quick answers

**Is CVE-2026-8534 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-8534 being exploited in the wild.

**How severe is CVE-2026-8534?** High severity, with a CVSS score of 8.3, published 14 May 2026.

**Which products and versions are affected?** Google Chrome prior to 148.0.7778.168; Google ChromeOS prior to 148.0.7778.168.

**Is there a fix for CVE-2026-8534?** A patch was published on 2026-05-12: Fixed in version 148.0.7778.168 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-8534 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-8534?** Check whether you run Google Chrome, Google Chrome Os, Google ChromeOS or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An integer overflow vulnerability exists in the GPU component of Google Chrome and ChromeOS. The flaw is triggered when processing a specially crafted HTML page. An attacker who has already compromised the renderer process can exploit this overflow to achieve a sandbox escape, potentially gaining elevated privileges on the host system. The vulnerability affects Linux and ChromeOS versions prior to 148.0.7778.168. Users are advised to update to the latest stable channel release to mitigate this risk.

## Affected products

- Google ChromeOS prior to 148.0.7778.168
- Google Chrome prior to 148.0.7778.168 (Linux)

## Timeline

- 2026-03-23: disclosed: Reported by Google internal researchers
- 2026-05-12: patched: Fixed in version 148.0.7778.168
- 2026-05-14: advisory: NVD publication date

## References

- [https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html](https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html)
- [https://issues.chromium.org/issues/495314407](https://issues.chromium.org/issues/495314407)

## Related threats

- [Google Chrome out of bounds read in Skia](https://junglewise.ai/threats/cve-2026-126922-out-of-bounds-read-in-skia-in-google-chrome-prior-to-157-0-8103)
- [Google Chrome use after free in Accessibility](https://junglewise.ai/threats/cve-2026-126921-use-after-free-in-accessibility-in-google-chrome-prior-to-157-0)
- [Google Chrome information leak in Skia](https://junglewise.ai/threats/cve-2026-126920-information-leak-in-skia-in-google-chrome-prior-to-157-0-8103-78)
- [Google Chrome use-after-free in BrowserTag](https://junglewise.ai/threats/cve-2026-126919-use-after-free-in-browsertag-in-google-chrome-prior-to-157-0)
- [Google Chrome use-after-free in Layout](https://junglewise.ai/threats/cve-2026-126918-use-after-free-in-layout-in-google-chrome-prior-to-157-0-8103-78)