PT-2026-20790 · Google · Google Chrome

CVE-2026-26995 · Publicado 2026-02-18 · Atualizado 2026-07-30

Positive Technologies (AI Summary) · Pt

CVSS v4.0

2.3

Baixa

Vetor base

AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Nome do Software Vulnerável e Versões Afetadas Versões do Chrome anteriores ao commit de correção 8fe0b08e9a0e7e2d08b268f451f2c79962e6acd0

Descrição Uma remoção incorreta da extensão de padding no utls para a variante não-pq do fingerprint HelloChrome 120. O Chrome apenas removia esta extensão ao enviar keyshares pq, afetando apenas este fingerprint, pois fingerprints mais recentes possuem keyshares pq por padrão e fingerprints mais antigos possuem esta extensão.

Recomendações Aplique o commit de correção 8fe0b08e9a0e7e2d08b268f451f2c79962e6acd0.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2026-26995

GHSA-RRXV-PMQ9-X67R

GO-2026-4512

OPENSUSE-SU-2026:21483-1

SUSE-SU-2026:0757-1

Produtos afetados

Google Chrome

Referências · 1744

• https://github.com/refraction-networking/utls · Nota
• https://github.com/refraction-networking/utls/security/advisories/GHSA-rrxv-pmq9-x67r · Nota
• https://github.com/refraction-networking/utls/commit/8fe0b08e9a0e7e2d08b268f451f2c79962e6acd0 · Nota
• https://suse.com/security/cve/CVE-2025-65797 · Nota
• https://suse.com/security/cve/CVE-2026-44427 · Nota
• https://suse.com/security/cve/CVE-2026-27589 · Nota
• https://suse.com/security/cve/CVE-2026-7736 · Nota
• https://suse.com/security/cve/CVE-2026-27137 · Nota
• https://suse.com/security/cve/CVE-2026-25232 · Nota
• https://suse.com/security/cve/CVE-2026-55513 · Nota
• https://suse.com/security/cve/CVE-2026-20736 · Nota
• https://suse.com/security/cve/CVE-2026-32828 · Nota
• https://suse.com/security/cve/CVE-2026-44323 · Nota
• https://suse.com/security/cve/CVE-2026-50551 · Nota
• https://suse.com/security/cve/CVE-2026-45709 · Nota