Google Chrome/Microsoft Edge (Gemini Live Panel): Schwachstelle ermöglicht Privilegieneskalation
WID-SEC-2026-0020 · first 07.01.2026 · updated 04.03.2026 · CVSS 8,8
What it is about
Chrome ist ein Internet-Browser von Google. Edge ist ein Internet-Browser von Microsoft Ein Angreifer kann eine Schwachstelle in Google Chrome/Microsoft Edge ausnutzen, um erweiterte Berechtigungen zu erlangen, auf die Kamera und das Mikrofon zuzugreifen, lokale Dateien anzuzeigen, Screenshots zu erstellen und Benutzer umzuleiten.
Under what conditions?
The BSI does not name any particular preconditions. Exploitable remotely according to the BSI.
What can happen in the worst case
An attacker could use the vulnerability to
- erweiterte Berechtigungen zu erlangen
- auf die Kamera
- das Mikrofon zuzugreifen
- lokale Dateien anzuzeigen
- Screenshots zu erstellen
- Benutzer umzuleiten
Am I affected?
Affected according to the BSI:
- Debian Linux
- Fedora Linux
- IGEL OS
- SUSE openSUSE
- Google Chrome <143.0.7499.192
- Google Chrome <143.0.7499.193
- Microsoft Edge <143.0.3650.139
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- Google Chrome 143.0.7499.192
- Google Chrome 143.0.7499.193
- Microsoft Edge 143.0.3650.139
Is the vulnerability already being exploited?
None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.
Information and sources
- Original BSI advisory (WID)
- Google Chrome Stable Channel Update for Desktop vom 2026-01-06 chromereleases.googleblog.com
- Fedora Security Advisory FEDORA-2026-540F5A89D1 vom 2026-01-08 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-2026-66162D01AE vom 2026-01-08 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-EPEL-2026-1E6D3D4287 vom 2026-01-08 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-EPEL-2026-2F73131E02 vom 2026-01-08 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-EPEL-2026-7101D35773 vom 2026-01-08 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-2026-5551BC920F vom 2026-01-08 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-2026-94D266DEF6 vom 2026-01-09 bodhi.fedoraproject.org
- Release notes for Microsoft Edge Security Updates vom 2026-01-11 learn.microsoft.com
- Fedora Security Advisory FEDORA-2026-2A94CC43D9 vom 2026-01-12 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-2026-77E3579A49 vom 2026-01-12 bodhi.fedoraproject.org
- openSUSE Security Update OPENSUSE-SU-2026:0006-1 vom 2026-01-09 lists.opensuse.org
- openSUSE Security Update OPENSUSE-SU-2026:0004-1 vom 2026-01-09 lists.opensuse.org
- openSUSE Security Update OPENSUSE-SU-2026:10016-1 vom 2026-01-09 lists.opensuse.org
- Debian Security Advisory DSA-6097 vom 2026-01-10 lists.debian.org
- Debian Security Advisory DSA-6097 vom 2026-01-10 security-tracker.debian.org
- IGEL Security Notice ISN-2026-02 vom 2026-02-17 kb.igel.com
- Unit42 Blog vom 2026-03-02 unit42.paloaltonetworks.com
CVE: CVE-2026-0628
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.