PT-2026-46740 · Google · Chrome For Ios

CVE-2026-11214 · Publicado 2026-04-30 · Atualizado 2026-06-05

Positive Technologies (AI Summary) · Pt

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Nome do Software Vulnerável e Versões Afetadas Google Chrome no iOS versões anteriores a 149.0.7827.53

Description Uma implementação inadequada permite que um invasor remoto vaze dados de origens cruzadas (cross-origin data), que são informações de um domínio diferente daquele que serviu a página original, por meio de uma página HTML manipulada.

Recommendations Atualize para a versão 149.0.7827.53 ou posterior.

Correção

CSRF

Origin Validation Error

Enumeração de Fraquezas

CWE-352

CWE-346

Identificadores relacionados

BDU:2026-08592

CVE-2026-11214

ECHO-E48C-B7FF-5595

OPENSUSE-SU-2026:10958-1

Produtos afetados

Chrome For Ios

Referências · 436

• https://suse.com/security/cve/CVE-2026-11305 · Nota
• https://suse.com/security/cve/CVE-2026-10984 · Nota
• https://suse.com/security/cve/CVE-2026-11223 · Nota
• https://suse.com/security/cve/CVE-2026-10965 · Nota
• https://suse.com/security/cve/CVE-2026-10890 · Nota
• https://suse.com/security/cve/CVE-2026-11247 · Nota
• https://suse.com/security/cve/CVE-2026-11162 · Nota
• https://suse.com/security/cve/CVE-2026-11088 · Nota
• https://suse.com/security/cve/CVE-2026-11013 · Nota
• https://suse.com/security/cve/CVE-2026-11196 · Nota
• https://suse.com/security/cve/CVE-2026-11184 · Nota
• https://suse.com/security/cve/CVE-2026-11182 · Nota
• https://suse.com/security/cve/CVE-2026-11241 · Nota
• https://suse.com/security/cve/CVE-2026-10983 · Nota
• https://suse.com/security/cve/CVE-2026-11272 · Nota