PT-2026-23050 · Google+1 · Google Chrome+1

Leo + 1 · Published 2026-02-12 · Updated 2026-05-15 · CVE-2026-3539

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.159

Description An object lifecycle issue in the DevTools component of Google Chrome allowed an attacker to potentially exploit heap corruption. This exploitation could occur if a user was convinced to install a malicious extension. The security severity is rated as High.

Recommendations Update Google Chrome to version 145.0.7632.159 or later.

Fix

DoS

Weakness Enumeration

CWE-1091

Related Identifiers

BDU:2026-03184

CVE-2026-3539

OPENSUSE-SU-2026:10296-1

OPENSUSE-SU-2026:20332-1

Affected Products

Google Chrome

Red Os

References · 38

• https://safe-surf.ru/specialists/bulletins-nkcki/729816 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-3539 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0423SE18MD · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-3539 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20332-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3539 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10296-1 · Vendor Advisory
• https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03184 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/729808 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3539 · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3539 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-3539 · Vendor Advisory