PT-2026-31493 · Google · Google Chrome

Lyra Rebane + 1 · Publicado 2025-07-08 · Atualizado 2026-04-12 · CVE-2026-5875

Positive Technologies (AI Summary) · Pt

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versões anteriores a 147.0.7727.55

Description Um problema de bypass de política existia no Blink, um componente do Google Chrome. Isso permitia que um atacante remoto realizasse spoofing de UI usando uma página HTML especialmente criada. A gravidade de segurança do Chromium é classificada como Média.

Recommendations Atualize o Google Chrome para a versão 147.0.7727.55 ou posterior.

Correção

IDOR

Enumeração de Fraquezas

CWE-639

Identificadores relacionados

BDU:2026-06413

CVE-2026-5875

OPENSUSE-SU-2026:10530-1

OPENSUSE-SU-2026:20575-1

Produtos afetados

Google Chrome

Referências · 73

• https://suse.com/security/cve/CVE-2026-5877 · Nota
• https://suse.com/security/cve/CVE-2026-5900 · Nota
• https://suse.com/security/cve/CVE-2026-5895 · Nota
• https://suse.com/security/cve/CVE-2026-5866 · Nota
• https://suse.com/security/cve/CVE-2026-5880 · Nota
• https://security-tracker.debian.org/tracker/CVE-2026-5875 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-5876 · Nota
• https://suse.com/security/cve/CVE-2026-5862 · Nota
• https://suse.com/security/cve/CVE-2026-5913 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5875 · Nota de Segurança
• https://suse.com/security/cve/CVE-2026-5867 · Nota
• https://suse.com/security/cve/CVE-2026-5868 · Nota
• https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-06413 · Nota de Segurança
• https://suse.com/security/cve/CVE-2026-5890 · Nota