PT-2026-47511 · Google · Google Chrome

CVE-2026-11685 · Publicado 2026-06-08 · Atualizado 2026-06-15

Positive Technologies (AI Summary) · Pt

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Nome do Software Vulnerável e Versões Afetadas Google Chrome no Mac versões anteriores a 149.0.7827.103

Description Uma implementação inadequada no MediaCapture permite que um invasor remoto vaze dados de origens cruzadas (cross-origin), que são dados de uma origem diferente daquela que iniciou a solicitação, por meio de uma página HTML manipulada.

Recommendations Atualize para a versão 149.0.7827.103 ou posterior.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2026-11685

ECHO-6270-C897-DFD9

OPENSUSE-SU-2026:11008-1

OPENSUSE-SU-2026:20944-1

Produtos afetados

Google Chrome

Referências · 84

• https://suse.com/security/cve/CVE-2026-11679 · Nota
• https://suse.com/security/cve/CVE-2026-11678 · Nota
• https://suse.com/security/cve/CVE-2026-11655 · Nota
• https://suse.com/security/cve/CVE-2026-11667 · Nota
• https://suse.com/security/cve/CVE-2026-11654 · Nota
• https://suse.com/security/cve/CVE-2026-11643 · Nota
• https://suse.com/security/cve/CVE-2026-11680 · Nota
• https://suse.com/security/cve/CVE-2026-11634 · Nota
• https://suse.com/security/cve/CVE-2026-11677 · Nota
• https://suse.com/security/cve/CVE-2026-11660 · Nota
• https://suse.com/security/cve/CVE-2026-11668 · Nota
• https://suse.com/security/cve/CVE-2026-11684 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-11685 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-11682 · Nota
• https://suse.com/security/cve/CVE-2026-11689 · Nota