High

Use-After-Free in Google Chrome Printing Sandbox Escape

IdentifiersCVE-2026-8001CWE-416· Use After Free

CVE-2026-8001 is a use-after-free vulnerability in the Printing component of Google Chrome affecting Linux, macOS, and ChromeOS versions prior to 148.0.7778.96. According to the provided content, the flaw can be triggered via a crafted HTML page and is exploitable by a remote attacker only after the renderer process has already been compromised. In that post-compromise context, the memory-safety bug may allow the attacker to leverage the Printing component to escape Chrome’s sandbox. The available information does not identify the specific vulnerable function or code path beyond the Printing component.

For your environment

Are you exposed to this one?

Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.

Start free trial

ANALYST BRIEF

Impact, mitigation & remediation

What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.

Impact

What an attacker gets, and what they’ve been doing with it.

Successful exploitation could allow an attacker who has already achieved renderer-process compromise to break out of Chrome’s sandbox on affected Linux, macOS, and ChromeOS systems. A sandbox escape can expand attacker control beyond the renderer’s restrictions and may enable access to more sensitive resources or higher-impact follow-on actions on the host. The provided content does not specify confirmed post-escape privileges or a complete exploit chain beyond the potential sandbox escape.

Mitigation

If you can’t patch tonight, do this now.

If immediate patching is not possible, reduce exposure by limiting use of untrusted web content, applying strict browser update policies, and using additional host-based hardening controls to constrain browser compromise impact. Because exploitation requires prior renderer compromise and delivery via a crafted HTML page, minimizing exposure to attacker-controlled pages and isolating high-risk browsing activity may reduce risk. However, the primary mitigation is to update to a fixed version.

Remediation

Patch, then assume compromise.

Upgrade Google Chrome to version 148.0.7778.96 or later on affected Linux, macOS, and ChromeOS systems. The vulnerability affects versions prior to 148.0.7778.96.

PUBLIC EXPLOITS

Exploits

No public exploits tracked yet. Mallory keeps watching.

VALID 0 / 0 TOTALView more in app

No public exploit code observed for this vulnerability.

EXPOSURE SURFACE

Affected products & vendors

Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.

VendorProductType

GoogleChromeapplication

Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.

ACTIVITY FEED

Recent activity

5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.

5 SOURCESView more in app

cvefeed high severityNews

May 6, 2026

CVE-2026-8001 - Google Chrome After Free Vulnerability (Sandbox Escape)

A use-after-free vulnerability in the Printing component of Google Chrome that could allow a remote attacker, after compromising the renderer process, to potentially escape the sandbox via a crafted HTML page.

What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which adversaries are exploiting it right now, which detections to deploy, and what to do tonight.

Start free trial

Exposure mapping

Query your assets running an affected version, and investigate the blast radius.

Threat actor evidence

Every observed campaign linking this CVE to a named adversary.

Associated malware

Malware families riding this exploit, with evidence and IOCs.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

Vendor-by-vendor mapping

Cross-references every affected SKU, including bundled OEM variants.

Social activity4