PT-2026-31491 · Google · Google Chrome

Publicado 2026-03-25 · Atualizado 2026-04-19 · CVE-2026-5873

Positive Technologies (AI Summary) · Pt

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versões anteriores a 147.0.7727.55

Description Um problema de leitura e gravação fora dos limites existe no V8, especificamente um bug de verificação de limites do turboshaft. Isso permite que um invasor remoto execute código arbitrário dentro de um sandbox usando uma página HTML manipulada.

Recommendations Atualize para a versão 147.0.7727.55 ou posterior.

Correção

RCE

DoS

Memory Corruption

Out of bounds Read

Enumeração de Fraquezas

CWE-787

CWE-125

Identificadores relacionados

BDU:2026-06290

CVE-2026-5873

OPENSUSE-SU-2026:10530-1

OPENSUSE-SU-2026:20575-1

Produtos afetados

Google Chrome

Referências · 78

• https://suse.com/security/cve/CVE-2026-5914 · Nota
• https://suse.com/security/cve/CVE-2026-5891 · Nota
• https://suse.com/security/cve/CVE-2026-5907 · Nota
• https://suse.com/security/cve/CVE-2026-5864 · Nota
• https://bugzilla.suse.com/1261758 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2026:20575-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2026:10530-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-5869 · Nota
• https://suse.com/security/cve/CVE-2026-5858 · Nota
• https://suse.com/security/cve/CVE-2026-5872 · Nota
• https://suse.com/security/cve/CVE-2026-5908 · Nota
• https://suse.com/security/cve/CVE-2026-5889 · Nota
• https://suse.com/security/cve/CVE-2026-5862 · Nota
• https://suse.com/security/cve/CVE-2026-5887 · Nota
• https://crbug.com/496301615 · Nota