PT-2026-6069 · Libvpx+2 · Libvpx+2

Published 2026-01-26 · Updated 2026-03-10 · CVE-2026-1861

Positive Technologies · (AI Summary)

CVSS v2.0

10

High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 144.0.7559.132

Description A heap buffer overflow exists in libvpx, a component of Google Chrome. This issue could allow a remote attacker to exploit heap corruption by using a specially crafted HTML page. The Chromium security severity is rated as High.

Recommendations Update Google Chrome to version 144.0.7559.132 or later.

Fix

Heap Based Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-122

CWE-787

Related Identifiers

BDU:2026-01937

CVE-2026-1861

OPENSUSE-SU-2026:10153-1

OPENSUSE-SU-2026:20183-1

Affected Products

Google Chrome

Red Os

Libvpx

References · 29

• https://bdu.fstec.ru/vul/2026-01937 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/729046 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-1861 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20183-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1861 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-1861 · Vendor Advisory
• https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-1861 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/729122 · Security Note
• https://osv.dev/vulnerability/CVE-2026-1861 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1861 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10153-1 · Vendor Advisory
• https://t.me/msrcreports/3013 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-chromium-cve-2026-1861-7.3 · Note
• https://redos.red-soft.ru/search/?iblock_id=24&q=CVE-2026-1861 · Note