> CVE-2026-4450

« BACK_TO_HOME
PUBLISHED
2026-03-20 02:16
MODIFIED
2026-03-20 02:16
EPSS (Prob. Exploit)
0.29%
Top 78.1%
DATA SOURCES:
NVD 🔗 2026-03-20 RED HAT 🔗 2026-03-22 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-05 MSRC 🔗 2026-11-02

> DESCRIPTION

Out of bounds write in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-787

> CWE DETAILED DESCRIPTIONS

CWE-787: Out-of-bounds Write - The product writes data past the end, or before the beginning, of the intended buffer.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Important

> GITHUB SECURITY ADVISORY

GHSA-7j59-v9qr-6fq9 HIGH

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

AFFECTED PACKAGES:
GO / github.com/microsoft/kiota-http-go
< 1.5.5
Fixed in: 1.5.5
NPM / kiota-typescript
< 1.0.0-preview.100
Fixed in: 1.0.0-preview.100
PIP / microsoft-kiota-http
< 1.9.9
Fixed in: 1.9.9
NUGET / Microsoft.Kiota.Abstractions
< 1.22.0
Fixed in: 1.22.0
MAVEN / com.microsoft.kiota:microsoft-kiota-abstractions
< 1.9.1
Fixed in: 1.9.1

> HISTORIQUE DES MODIFICATIONS

Première apparition
20/03/2026 02:16
Source: NVD
📊 ENRICHISSEMENT 01/04/2026 06:02
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-787: Out-of-bounds Write - The product writes data past the end, or before the beginning, of the intended buffer.
📊 ENRICHISSEMENT 22/03/2026 05:01
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Important", "severity_scale": null }
📊 ENRICHISSEMENT 22/03/2026 05:01
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 7 months ago

> REFERENCES

https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_...
https://issues.chromium.org/issues/487746373
« BACK_TO_HOME