PT-2026-31479 · Google · Google Chrome+1

5Shain · Publicado 2026-04-07 · Atualizado 2026-04-12 · CVE-2026-5861

Positive Technologies (AI Summary) · Pt

CVSS v2.0

9.7

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:P/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versões anteriores a 147.0.7727.55

Description Um problema de uso após liberação no mecanismo JavaScript V8 no Google Chrome permitia que um atacante remoto executasse arbitrariamente código dentro de uma sandbox por meio de uma página HTML especialmente criada. A questão está relacionada à corrupção de memória e a uma possível fuga da sandbox do renderizador.

Recommendations Atualize o Google Chrome para a versão 147.0.7727.55 ou posterior.

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

BDU:2026-04906

CVE-2026-5861

OPENSUSE-SU-2026:10530-1

OPENSUSE-SU-2026:20575-1

Produtos afetados

Google Chrome

V8

Referências · 73

• https://suse.com/security/cve/CVE-2026-5910 · Nota
• https://suse.com/security/cve/CVE-2026-5906 · Nota
• https://suse.com/security/cve/CVE-2026-5880 · Nota
• https://suse.com/security/cve/CVE-2026-5897 · Nota
• https://suse.com/security/cve/CVE-2026-5900 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2026:20575-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-5869 · Nota
• https://suse.com/security/cve/CVE-2026-5881 · Nota
• https://suse.com/security/cve/CVE-2026-5866 · Nota
• https://suse.com/security/cve/CVE-2026-5878 · Nota
• https://suse.com/security/cve/CVE-2026-5886 · Nota
• https://suse.com/security/cve/CVE-2026-5885 · Nota
• https://suse.com/security/cve/CVE-2026-5870 · Nota
• https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-5863 · Nota