PT-2026-23052 · Google+1 · Google Chrome+1

Syn4Pse · Published 2026-02-16 · Updated 2026-05-15 · CVE-2026-3541

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.159

Description An issue exists in Google Chrome related to an inappropriate implementation in CSS. This could allow a remote attacker to perform an out of bounds memory read through a specially crafted HTML page.

Recommendations Update Google Chrome to version 145.0.7632.159 or later.

Fix

DoS

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2026-03194

CVE-2026-3541

OPENSUSE-SU-2026:10296-1

OPENSUSE-SU-2026:20332-1

Affected Products

Google Chrome

Red Os

References · 37

• https://nvd.nist.gov/vuln/detail/CVE-2026-3541 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3541 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/729814 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/729807 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0423SE18MD · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3541 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:20332-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-3541 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-3541 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10296-1 · Vendor Advisory
• https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03194 · Security Note
• https://osv.dev/vulnerability/CVE-2026-3541 · Vendor Advisory