PT-2026-7640 · Google · Google Chrome

Published 2026-01-01 · Updated 2026-02-20 · CVE-2026-2314

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.45

Description A heap buffer overflow exists in the Codecs component of Google Chrome. This issue could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTML page. The security severity is rated as High.

Recommendations Update Google Chrome to version 145.0.7632.45 or later.

Fix

RCE

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

BDU:2026-01940

CVE-2026-2314

OPENSUSE-SU-2026:10201-1

OPENSUSE-SU-2026:20248-1

Affected Products

Google Chrome

References · 42

• https://security-tracker.debian.org/tracker/CVE-2026-2314 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-2314 · Vendor Advisory
• https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_10.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20248-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01940 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2314 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-2314 · Security Note
• https://osv.dev/vulnerability/CVE-2026-2314 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/729002 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/729037 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10201-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0423SE18MD · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/729316 · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory