PT-2026-27279 · Google+1 · Google Chrome+1

Published 2026-03-10 · Updated 2026-05-20 · CVE-2026-4678

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.165

Description A use-after-free issue exists in the WebGPU component of Google Chrome. This flaw could allow a remote attacker to execute arbitrary code within a sandbox through a specially crafted HTML page. Reports indicate increased targeting of this issue by malicious actors.

Recommendations Update Google Chrome to version 146.0.7680.165 or later.

Fix

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-04233

CVE-2026-4678

OPENSUSE-SU-2026:10434-1

OPENSUSE-SU-2026:20427-1

Affected Products

Google Chrome

Red Os

References · 30

• https://osv.dev/vulnerability/openSUSE-SU-2026:20427-1 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/730333 · Security Note
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-4678 · Vendor Advisory
• https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_23.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10434-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-4678 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4678 · Security Note
• https://bdu.fstec.ru/vul/2026-04233 · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4678 · Security Note
• https://suse.com/security/cve/CVE-2026-4680 · Note
• https://suse.com/security/cve/CVE-2026-4679 · Note
• https://twitter.com/vuldb/status/2036261772991275045 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2036413784110055691 · Twitter Post