PT-2026-38092 · Google · Google Chrome

Pjwhatforlunch · Publicado 2026-04-23 · Atualizado 2026-05-14 · CVE-2026-7899

Positive Technologies (AI Summary) · Pt

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Nome do Software Vulnerável e Versões Afetadas Google Chrome versões anteriores a 148.0.7778.96

Descrição Um problema de leitura e gravação fora dos limites no V8 permite que um invasor remoto execute código arbitrário dentro de um sandbox por meio de uma página HTML manipulada.

Recomendações Atualize para a versão 148.0.7778.96 ou posterior.

Correção

DoS

RCE

LPE

Out of bounds Read

Memory Corruption

Enumeração de Fraquezas

CWE-125

CWE-787

Identificadores relacionados

BDU:2026-07387

CVE-2026-7899

ECHO-D6A1-D8D5-4976

OPENSUSE-SU-2026:10778-1

Produtos afetados

Google Chrome

Referências · 143

• https://twitter.com/nebusecurity/status/2052842241828561208 · Publicação no Twitter
• https://suse.com/security/cve/CVE-2026-7978 · Nota
• https://issues.chromium.org/issues/505481948 · Nota
• https://suse.com/security/cve/CVE-2026-7964 · Nota
• https://suse.com/security/cve/CVE-2026-7931 · Nota
• https://suse.com/security/cve/CVE-2026-7916 · Nota
• https://suse.com/security/cve/CVE-2026-7904 · Nota
• https://suse.com/security/cve/CVE-2026-7907 · Nota
• https://suse.com/security/cve/CVE-2026-8007 · Nota
• https://suse.com/security/cve/CVE-2026-7936 · Nota
• https://suse.com/security/cve/CVE-2026-8008 · Nota
• https://suse.com/security/cve/CVE-2026-7960 · Nota
• https://suse.com/security/cve/CVE-2026-7937 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-7899 · Nota
• https://suse.com/security/cve/CVE-2026-7976 · Nota