CVE-2026-2441

> 文章来源: Exploit-DB

> 抓取时间: 202605050803

> 原文 ID: article_742

> 生成时间: 2026-05-05 14:17

基础信息

字段值 CVECVE-2026-2441, cve-2026-2441 CVSS 估计9.0+ 漏洞类型command_injection, memory_corruption, dos 受影响组件Google Chrome 145.0.7632.75

漏洞摘要

[local] Google Chrome 145.0.7632.75 - CSSFontFeatureValuesMap

根因分析

command_injection, memory_corruption, dos

攻击向量

详见原文

PoC / 关键代码

# Date: 2026-02-23
# Exploit Author: nu11secur1ty
# Vendor Homepage: https://www.google.com/chrome/
# Software Link: https://www.google.com/chrome/
# Version: Chrome <= 144.x | Chrome < 145.0.7632.75
# Tested on: Windows 11 / Linux / macOS
# CVE: CVE-2026-2441
# Exploit Repository:
https://github.co

修复建议

pointer with a deep copy (const FontFeatureAliases aliases_).

Semgrep 检测 Hint

- id: auto-hint-cve_2026_2441
  pattern: 'os.system($CMD)'
  message: "Potential command_injection - 参考 CVE-2026-2441, cve-2026-2441"
  severity: WARNING
  languages: [python]

标签

command_injection, memory_corruption, dos

*由 vuln_card_gen.py 自动生成，来源: Exploit-DB*

🤖 漏洞情报系统自动分析生成 · 2026-07-02