cve-2026-8009

CVE-2026-8009 is a low-severity Chromium Cast vulnerability fixed in Google Chrome 148.0.7778.96 for Linux and 148.0.7778.96/97 for Windows and macOS. The NVD added a Chrome application CPE constrained by Windows, Linux, and macOS platform CPEs on May 7, 2026. While the CVE itself is modest, it highlights the complexity of Chromium vulnerability tracking, as the same engine powers Chrome, Edge, Brave, Opera, Vivaldi, Electron apps, and enterprise compliance dashboards. This tag covers discussions around the CVE-2026-8009 fix, its impact on Chrome users, and the broader implications for security teams managing Chromium-based software inventories and CPE mappings.