PT-2026-31486 · Google · Google Chrome+1

Cinzinga · Publicado 2026-03-16 · Atualizado 2026-04-12 · CVE-2026-5868

Positive Technologies (AI Summary) · Pt

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versões anteriores a 147.0.7727.55

Description Um estouro de buffer heap em ANGLE dentro do Google Chrome no Mac poderia permitir que um atacante remoto executasse código arbitrário dentro de uma sandbox por meio de uma página HTML especialmente criada. A exploração envolve conteúdo WebGL/gráficos criado que pode corromper a memória no ANGLE, potencialmente escalando compromissos do renderizador.

Recommendations Atualize o Google Chrome para a versão 147.0.7727.55 ou posterior.

Correção

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-122

Identificadores relacionados

BDU:2026-06297

CVE-2026-5868

OPENSUSE-SU-2026:10530-1

OPENSUSE-SU-2026:20575-1

Produtos afetados

Angle

Google Chrome

Referências · 73

• https://suse.com/security/cve/CVE-2026-5869 · Nota
• https://suse.com/security/cve/CVE-2026-5860 · Nota
• https://suse.com/security/cve/CVE-2026-5919 · Nota
• https://suse.com/security/cve/CVE-2026-5876 · Nota
• https://suse.com/security/cve/CVE-2026-5880 · Nota
• https://suse.com/security/cve/CVE-2026-5877 · Nota
• https://suse.com/security/cve/CVE-2026-5863 · Nota
• https://suse.com/security/cve/CVE-2026-5915 · Nota
• https://suse.com/security/cve/CVE-2026-5894 · Nota
• https://suse.com/security/cve/CVE-2026-5902 · Nota
• https://bdu.fstec.ru/vul/2026-06297 · Nota de Segurança
• https://suse.com/security/cve/CVE-2026-5883 · Nota
• https://suse.com/security/cve/CVE-2026-5910 · Nota
• https://suse.com/security/cve/CVE-2026-5887 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-5868 · Aviso do Fabricante