PT-2026-31518 · Google · Google Chrome

Lbherrera + 1 · Publicado 2026-01-13 · Atualizado 2026-04-12 · CVE-2026-5900

Positive Technologies (AI Summary) · Pt

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versões anteriores a 147.0.7727.55

Description Uma falha de bypass de política existia no componente Downloads do Google Chrome. Isso permitia que um atacante remoto contornasse as proteções de vários downloads por meio de uma página HTML especialmente criada.

Recommendations Atualize o Google Chrome para a versão 147.0.7727.55 ou posterior.

Correção

Protection Mechanism Failure

Information Disclosure

Enumeração de Fraquezas

CWE-693

CWE-200

Identificadores relacionados

BDU:2026-04939

CVE-2026-5900

OPENSUSE-SU-2026:10530-1

OPENSUSE-SU-2026:20575-1

Produtos afetados

Google Chrome

Referências · 71

• https://suse.com/security/cve/CVE-2026-5887 · Nota
• https://suse.com/security/cve/CVE-2026-5907 · Nota
• https://suse.com/security/cve/CVE-2026-5901 · Nota
• https://suse.com/security/cve/CVE-2026-5883 · Nota
• https://suse.com/security/cve/CVE-2026-5872 · Nota
• https://suse.com/security/cve/CVE-2026-5894 · Nota
• https://suse.com/security/cve/CVE-2026-5876 · Nota
• https://suse.com/security/cve/CVE-2026-5897 · Nota
• https://suse.com/security/cve/CVE-2026-5859 · Nota
• https://suse.com/security/cve/CVE-2026-5882 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2026:10530-1 · Aviso do Fabricante
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-5900 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2026:20575-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-5900 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-5875 · Nota