cve-2026-8012

CVE-2026-8012 is a Chromium MHTML vulnerability disclosed by Google and Microsoft in May 2026, fixed in Chrome before version 148.0.7778.96. The bug allows an attacker with renderer compromise to inject arbitrary scripts or HTML via a crafted page. While Chromium rates it low severity, CISA's ADP enrichment scores it medium, highlighting a mismatch that matters for enterprise risk. The CPE record covers Chrome on Windows, Linux, and macOS. For WindowsForum readers, this tag covers the technical details of the vulnerability, its disclosure timeline, and the practical implications for enterprise patch management, especially how low-severity Chromium bugs can still pose post-compromise leverage in corporate environments.