Chromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming
CVE-2026-76023
Scope
What the vendor says is affected
- Microsoft .NET Framework 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems
- Microsoft .NET Framework 3.5 on Windows 11 Version 26H1 for ARM64-based Systems
- Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 for x64-based Systems
- .NET 10.0 installed on Windows
- Microsoft .NET Framework 3.5 on Windows 11 version 26H1 for x64-based Systems
- .NET 8.0 installed on Windows
- .NET 9.0 installed on Windows
- Microsoft Visual Studio 2026 version 18.8
- Microsoft Visual Studio 2022 version 17.14
- Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems
- Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems
Versions the vendor lists as fixed
- 4.8.9344.0
- 2.0.50727.9183 & 3.0.30729.9169
- 10.0.11
- 8.0.30
- 9.0.19
- 18.8.3
- 17.14.38
- 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0
- 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0
Next step
What the vendor recommends
Install KB5120711. Install KB5120747. Install KB5122106. Install KB5122104. Install KB5122105. Install KB5120703. Install KB5120698.
Review the complete instructions on the vendor's siteUpdate history
What changed in later vendor updates
SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.
- The vendor changed its remediation guidance.
Timeline
When this advisory changed
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Updated by Microsoft Security Response Center
The vendor changed the advisory after it was first published.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.
Vulnerabilities