PT-2026-29450 · Google+1 · Google Chrome+1

Inspector-Ambitious · Publicado 2026-03-31 · Atualizado 2026-05-20 · CVE-2026-5272

Positive Technologies (AI Summary) · Pt

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versões anteriores a 146.0.7680.178

Description Um estouro de buffer heap existe no componente GPU do Google Chrome. Esta falha permite que um atacante remoto execute código arbitrário usando uma página HTML especialmente criada.

Recommendations Atualize o Google Chrome para a versão 146.0.7680.178 ou posterior.

Correção

DoS

RCE

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-122

Identificadores relacionados

BDU:2026-05618

CVE-2026-5272

OPENSUSE-SU-2026:10487-1

OPENSUSE-SU-2026:20460-1

Produtos afetados

Google Chrome

Red Os

Referências · 42

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5272 · Nota de Segurança
• https://issues.chromium.org/issues/491732188 · Nota
• https://security-tracker.debian.org/tracker/CVE-2026-5272 · Aviso do Fabricante
• https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-5277 · Nota
• https://crbug.com/491732188 · Nota
• https://suse.com/security/cve/CVE-2026-5274 · Nota
• https://suse.com/security/cve/CVE-2026-5273 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-5272 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-5272 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-5280 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2026:20460-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-5281 · Nota
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-5272 · Nota