PT-2026-33143 · Google · Google Chrome+1

Publicado 2026-03-26 · Atualizado 2026-05-27 · CVE-2026-6305

Positive Technologies (AI Summary) · Pt

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versões anteriores a 147.0.7727.101

Description Um estouro de buffer de heap no PDFium permite que um invasor remoto execute código arbitrário dentro de um sandbox por meio de um arquivo PDF manipulado.

Recommendations Atualize para a versão 147.0.7727.101 ou posterior.

Correção

DoS

Memory Corruption

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-122

Identificadores relacionados

BDU:2026-05525

CVE-2026-6305

OPENSUSE-SU-2026:10572-1

OPENSUSE-SU-2026:20588-1

Produtos afetados

Google Chrome

Pdfium

Referências · 48

• https://suse.com/security/cve/CVE-2026-6363 · Nota
• https://issues.chromium.org/issues/496618639 · Nota
• https://suse.com/security/cve/CVE-2026-6296 · Nota
• https://suse.com/security/cve/CVE-2026-6301 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2026:20588-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-6307 · Nota
• https://twitter.com/infoflowcloud/status/2044703761436680289 · Publicação no Twitter
• https://suse.com/security/cve/CVE-2026-6358 · Nota
• https://suse.com/security/cve/CVE-2026-6318 · Nota
• https://suse.com/security/cve/CVE-2026-6313 · Nota
• https://suse.com/security/cve/CVE-2026-6360 · Nota
• https://suse.com/security/cve/CVE-2026-6312 · Nota
• https://suse.com/security/cve/CVE-2026-6362 · Nota
• https://security-tracker.debian.org/tracker/CVE-2026-6305 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-6300 · Nota