PT-2026-46563 · Google · Chrome On Android

CVE-2026-11034 · Publicado 2026-06-02 · Atualizado 2026-06-09

Positive Technologies (AI Summary) · Pt

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Nome do Software Vulnerável e Versões Afetadas Google Chrome no Android versões anteriores a 149.0.7827.53

Descrição A validação insuficiente de entradas não confiáveis no Tab Group Sync permite que um invasor remoto injete scripts ou HTML arbitrários, resultando em Universal Cross-Site Scripting (UXSS), por meio de tráfego de rede malicioso.

Recomendações Atualize para a versão 149.0.7827.53 ou posterior.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2026-09266

CVE-2026-11034

ECHO-DA1B-B3CD-FBDA

OPENSUSE-SU-2026:10958-1

Produtos afetados

Chrome On Android

Referências · 440

• https://suse.com/security/cve/CVE-2026-11167 · Nota
• https://suse.com/security/cve/CVE-2026-11249 · Nota
• https://suse.com/security/cve/CVE-2026-11248 · Nota
• https://suse.com/security/cve/CVE-2026-11139 · Nota
• https://suse.com/security/cve/CVE-2026-11176 · Nota
• https://suse.com/security/cve/CVE-2026-11061 · Nota
• https://suse.com/security/cve/CVE-2026-11007 · Nota
• https://suse.com/security/cve/CVE-2026-10927 · Nota
• https://suse.com/security/cve/CVE-2026-11116 · Nota
• https://suse.com/security/cve/CVE-2026-11025 · Nota
• https://suse.com/security/cve/CVE-2026-11181 · Nota
• https://suse.com/security/cve/CVE-2026-10938 · Nota
• https://suse.com/security/cve/CVE-2026-10902 · Nota
• https://suse.com/security/cve/CVE-2026-11147 · Nota
• https://suse.com/security/cve/CVE-2026-11265 · Nota