Date Posted: 2026/02/13
[Vulnerability Alert] High-Risk Security Vulnerabilities Found in Chromium-based Browsers (CVE-2026-1861 and CVE-2026-1862), Please Confirm and Patch Immediately
- Subject Explanation: [Vulnerability Alert] High-Risk Security Vulnerabilities Found in Chromium-based Browsers (CVE-2026-1861 and CVE-2026-1862), Please Confirm and Patch Immediately
- Content Description:
- Forwarding National Information Security Analysis and Sharing Center (NISAC) Alert NISAC-200-202602-00000089
- Researchers have discovered high-risk security vulnerabilities (CVE-2026-1861 and CVE-2026-1862) in Chromium-based browsers such as Google Chrome, Microsoft Edge, Vivaldi, and Brave. The vulnerability types are Heap-based Buffer Overflow and Type Confusion, respectively. Unauthenticated remote attackers can exploit these by using specially crafted websites to cause the browser to terminate abnormally. Please confirm and patch immediately.
- Impacted Platforms:
- Google Chrome versions prior to 144.0.7559.132
- Microsoft Edge versions prior to 144.0.3719.115
- Vivaldi versions prior to 7.7.3851.58
- Brave versions prior to 1.86.148
- Suggested Measures:
- Please update Google Chrome browser to version 144.0.7559.132 or later https://support.google.com/chrome/answer/95414?hl=zh-Hant
- Please update Microsoft Edge browser to version 144.0.3719.115 or later https://support.microsoft.com/zh-tw/topic/microsoft-edge-%E6%9B%B4%E6%96%B0%E8%A8%AD%E5%AE%9A-af8aaca2-1b69-4870-94fe-18822dbb7ef1
- Please update Vivaldi browser to version 7.8.3925.62 or later https://help.vivaldi.com/desktop/install-update/update-vivaldi/
- Please update Brave browser to version 1.86.148 or later https://community.brave.com/t/how-to-update-brave/384780
- References:
Computer and Communication Center
Network Systems Division