PT-2026-20520 · Google+1 · Google Chrome+1

Candymate + 1 · Published 2026-01-01 · Updated 2026-05-15 · CVE-2026-2649

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.109

Description An integer overflow in the V8 JavaScript engine within Google Chrome could lead to heap corruption. This issue could be triggered by a remote attacker using a specially crafted HTML page. The Chromium security severity is rated as High.

Recommendations Update Google Chrome to version 145.0.7632.109 or later.

Fix

DoS

Weakness Enumeration

CWE-472

Related Identifiers

BDU:2026-06197

CVE-2026-2649

OPENSUSE-SU-2026:10234-1

OPENSUSE-SU-2026:20258-1

Affected Products

Google Chrome

Red Os

References · 36

• https://bdu.fstec.ru/vul/2026-06197 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/728998 · Security Note
• https://osv.dev/vulnerability/CVE-2026-2649 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0423SE18MD · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2649 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-2649 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/728971 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/729322 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:20258-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-2649 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/729306 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10234-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-2649 · Vendor Advisory