Vulnerabilità ed exploit

Rollout ChromeOS LTC-144 avviato per la maggioranza dei dispositivi

Google rilascia LTC-144 (144.0.7559.247, Platform 16503.79.0) per la maggior parte dei dispositivi ChromeOS. LTS rimane su LTS-138 fino al 21 aprile 2026 e i dispositivi gestiti in LTS non riceveranno ancora questa build.

1 fonte · 26 mar

CVE-2026-3542

NVD KEV

CVSS 8.8 HIGH: inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. EPSS 0.4% (33º percentile). Patch Microsoft: Release Notes.

CVE-2026-3545

NVD KEV

CVSS 9.6 CRITICAL: insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. EPSS 0.3% (23º percentile). Patch Microsoft: Release Notes.

CVE-2026-3541

NVD KEV

CVSS 8.8 HIGH: inappropriate implementation in CSS in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. EPSS 0.3% (22º percentile). Patch Microsoft: Release Notes.

Cronologia

Fonti

Part of the PlainSec briefing for 2026-03-27

Every edition of this story: Rollout ChromeOS LTC-144 avviato per la maggioranza dei dispositivi

Altro da oggi