PT-2026-20520

CVE-2026-2649

Published

2026-01-01

Updated

2026-08-31

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.109

Description An integer overflow in the V8 JavaScript engine within Google Chrome could lead to heap corruption. This issue could be triggered by a remote attacker using a specially crafted HTML page. The Chromium security severity is rated as High.

Recommendations Update Google Chrome to version 145.0.7632.109 or later.

Exploitability

Fix

Impacts

Researchers

Candymate

Junyoung Park

Vendors

Affected products

Weakness enumeration

CWE-472: External Control of Assumed-Immutable Web Parameter

Related identifiers