PT-2026-7643 · Google · Google Chrome

Brendan Draper · Published 2026-01-01 · Updated 2026-02-19 · CVE-2026-2317

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.45

Description An issue existed in the Animation rendering within Google Chrome, specifically related to an inappropriate implementation. This could allow a remote attacker to leak cross-origin data through a specially crafted HTML page. The security severity is rated as Medium.

Recommendations Update Google Chrome to version 145.0.7632.45 or later.

Fix

CSRF

Information Disclosure

Weakness Enumeration

CWE-352

CWE-200

Related Identifiers

BDU:2026-01828

CVE-2026-2317

OPENSUSE-SU-2026:10201-1

OPENSUSE-SU-2026:20248-1

Affected Products

Google Chrome

References · 34

• https://nvd.nist.gov/vuln/detail/CVE-2026-2317 · Security Note
• https://osv.dev/vulnerability/CVE-2026-2317 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2317 · Security Note
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_10.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20248-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10201-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-2317 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0423SE18MD · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01828 · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-2317 · Vendor Advisory
• https://t.me/msrcreports/3023 · Telegram Post
• https://bugzilla.suse.com/1258199 · Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-2317 · Note