PT-2026-24882 · Google+1 · Google Chrome+1

Barath Stalin K · Publicado 2026-01-28 · Atualizado 2026-05-15 · CVE-2026-3935

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.71

Description A flaw in the WebAppInstalls component of Google Chrome allowed a remote attacker to perform UI spoofing through a specially crafted HTML page. The Chromium security severity is rated as Medium.

Recommendations Update Google Chrome to version 146.0.7680.71 or later.

Correção

UI Misrepresentation of Critical Information

RCE

Enumeração de Fraquezas

CWE-451

CWE-20

Identificadores relacionados

BDU:2026-05750

CVE-2026-3935

OPENSUSE-SU-2026:10376-1

OPENSUSE-SU-2026:20372-1

Produtos afetados

Google Chrome

Red Os

Referências · 54

• https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_10.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-3915 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-3935 · Nota de Segurança
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-3935 · Nota
• https://twitter.com/CVEnew/status/2031867587148067106 · Publicação no Twitter
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0423SE18MD · Aviso do Fabricante
• https://bugzilla.suse.com/1259530 · Nota
• https://suse.com/security/cve/CVE-2026-3914 · Nota
• https://suse.com/security/cve/CVE-2026-3918 · Nota
• https://suse.com/security/cve/CVE-2026-3928 · Nota
• https://redos.red-soft.ru/search/?iblock_id=24&q=CVE-2026-3935 · Nota
• https://suse.com/security/cve/CVE-2026-3931 · Nota
• https://suse.com/security/cve/CVE-2026-3935 · Nota
• https://bugzilla.suse.com/1259659 · Nota
• https://suse.com/security/cve/CVE-2026-3909 · Nota