PT-2026-31478 · Google · Google Chrome

Publicado 2026-04-07 · Atualizado 2026-05-26 · CVE-2026-5860

Positive Technologies (AI Summary) · Pt

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versões anteriores a 147.0.7727.55

Description Um problema de uso após liberação existe no componente WebRTC do Google Chrome. Essa falha pode permitir que um invasor remoto execute código arbitrário dentro de uma sandbox, explorando uma página HTML especialmente criada. A gravidade da segurança é classificada como Alta.

Recommendations Atualize o Google Chrome para a versão 147.0.7727.55 ou posterior.

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

BDU:2026-04905

CVE-2026-5860

OPENSUSE-SU-2026:10530-1

OPENSUSE-SU-2026:20575-1

Produtos afetados

Google Chrome

Referências · 74

• https://suse.com/security/cve/CVE-2026-5906 · Nota
• https://suse.com/security/cve/CVE-2026-5885 · Nota
• https://suse.com/security/cve/CVE-2026-5869 · Nota
• https://suse.com/security/cve/CVE-2026-5879 · Nota
• https://suse.com/security/cve/CVE-2026-5873 · Nota
• https://suse.com/security/cve/CVE-2026-5868 · Nota
• https://suse.com/security/cve/CVE-2026-5889 · Nota
• https://suse.com/security/cve/CVE-2026-5893 · Nota
• https://suse.com/security/cve/CVE-2026-5904 · Nota
• https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-5912 · Nota
• https://suse.com/security/cve/CVE-2026-5903 · Nota
• https://suse.com/security/cve/CVE-2026-5896 · Nota
• https://suse.com/security/cve/CVE-2026-5897 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-5860 · Nota