PT-2026-24862 · Google+1 · Google Chrome+1

Cinzinga · Published 2026-02-04 · Updated 2026-05-15 · CVE-2026-3914

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.71

Description An integer overflow issue exists in the WebML component of Google Chrome. A remote attacker could potentially exploit heap corruption by using a specially crafted HTML page. The security severity of this issue is rated as High by Chromium.

Recommendations Update Google Chrome to version 146.0.7680.71 or later.

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-472

CWE-190

Related Identifiers

BDU:2026-04685

CVE-2026-3914

OPENSUSE-SU-2026:10376-1

OPENSUSE-SU-2026:20372-1

Affected Products

Google Chrome

Red Os

References · 56

• https://osv.dev/vulnerability/openSUSE-SU-2026:20372-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3914 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-3914 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10376-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3914 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/729730 · Security Note
• https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_10.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-3914 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04685 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0423SE18MD · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/729757 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-3914 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-3925 · Note