cve 2026 8000

CVE-2026-8000 is a ChromeDriver input-validation vulnerability disclosed on May 6, 2026, affecting Google Chrome on Windows before version 148.0.7778.96. The flaw allows remote code execution if a user visits a crafted HTML page. There is a notable discrepancy between Chromium's "Low" severity label and CISA-ADP's 8.8 "High" CVSS score, highlighting differing risk assessments. ChromeDriver is primarily a developer and automation tool, but this CVE underscores that browser ecosystem edges are increasingly part of the attack surface. Discussions on WindowsForum cover the technical details, patch guidance, and implications for Windows users.