This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] Google Chrome fixes 3 vulnerabilities
Google fixes 3 high-severity vulnerabilities in Google Chrome and other browsers based on the Chromium engine. The fix has been released for Windows/macOS (versions 145.0.7632.109/110). The fix for Linux (144.0.7559.109) should be available within days to weeks [1]. A fix for Microsoft Edge is not yet available [2].
Allows an unauthenticated remote attacker, using specially crafted content (a PDF or HTML page), to write out of bounds of allocated memory without authorization, or to corrupt memory and potentially execute code [1].
The vulnerability is present in products:
- Linux: <144.0.7559.109;
- Windows: <145.0.7632.109;
- macOS: <145.0.7632.110;
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
More information:
- CVE-2026-2648 at cve.org, NVD
- CVE-2026-2649 at cve.org, NVD
- CVE-2026-2650 at cve.org, NVD
- CWE-122: Heap-based Buffer Overflow at cwe.mitre.org
The vulnerability was publicly disclosed 18. 2. 2026.
Links
By CESNET, z.s.p.o. Michaela Ručková on 23. 2. 2026.