轉發 國家資安資訊分享與分析中心 資安訊息警訊 NISAC-200-202602-00000089

[內容說明]
研究人員發現Google Chrome、Microsoft Edge、Vivaldi及Brave等以Chromium為基礎之瀏覽器存在高風險安全漏洞(CVE-2026-1861與CVE-2026-1862)，類型分別為堆積型緩衝區溢位(Heap-based Buffer Overflow)與類型混淆(Type Confusion)，未經身份鑑別之遠端攻擊者可利用特製網站使瀏覽器異常終止，請儘速確認並進行修補。

[影響平台]
Google Chrome 144.0.7559.132(不含)以前版本
Microsoft Edge 144.0.3719.115(不含)以前版本
Vivaldi 7.7.3851.58(不含)以前版本
Brave 1.86.148(不含)以前版本

[建議措施]
1. 請更新Google Chrome瀏覽器至144.0.7559.132(含)以後版本 https://support.google.com/chrome/answer/95414?hl=zh-Hant
2. 請更新Microsoft Edge瀏覽器至144.0.3719.115以後版本 https://support.microsoft.com/zh-tw/topic/microsoft-edge-%E6%9B%B4%E6%96%B0%E8%A8%AD%E5%AE%9A-af8aaca2-1b69-4870-94fe-18822dbb7ef1
3. 請更新Vivaldi瀏覽器至7.8.3925.62(含)以後版本 https://help.vivaldi.com/desktop/install-update/update-vivaldi/
4. 請更新Brave瀏覽器至1.86148(含)以後版本 https://community.bravecom/t/how-to-update-brave/384780
Forwarded from the National Cybersecurity Information Sharing and Analysis Center: Cybersecurity Alert NISAC-200-202602-00000089

[Content Description]
Researchers have discovered high-risk security vulnerabilities (CVE-2026-1861 and CVE-2026-1862) in Chromium-based browsers such as Google Chrome, Microsoft Edge, Vivaldi, and Brave. The vulnerabilities are Heap-based Buffer Overflow and Type Confusion, respectively. Unauthenticated remote attackers could use specially crafted websites to cause the browsers to terminate abnormally. Please confirm and patch these vulnerabilities as soon as possible.

[Affected Platforms]
Google Chrome versions prior to 144.0.7559.132
Microsoft Edge versions prior to 144.0.3719.115
Vivaldi versions prior to 7.7.3851.58
Brave versions prior to 1.86.148

[Recommended Measures]
1. Please update Google Chrome to version 144.0.7559.132 or later: https://support.google.com/chrome/answer/95414?hl=zh-Hant

2. Please update Microsoft Edge to version 144.0.3719.115 or later. https://support.microsoft.com/zh-tw/topic/microsoft-edge-%E6%9B%B4%E6%96%B0%E8%A8%AD%E5%AE%9A-af8aaca2-1b69-4870-94fe-18822dbb7ef1

3. Please update Vivaldi browser to version 7.8.3925.62 or later. https://help.vivaldi.com/desktop/install-update/update-vivaldi/

4. Please update Brave browser to version 1.86148 or later. https://community.bravecom/t/how-to-update-brave/384780