{"id":6439,"date":"2026-01-08T11:05:54","date_gmt":"2026-01-08T02:05:54","guid":{"rendered":"https:\/\/readtrends.com\/ko\/chrome-webview-rce\/"},"modified":"2026-01-08T11:05:54","modified_gmt":"2026-01-08T02:05:54","slug":"chrome-webview-rce","status":"publish","type":"post","link":"https:\/\/readtrends.com\/ko\/chrome-webview-rce\/","title":{"rendered":"\ud06c\ub86c \uc6f9\ubdf0\uc758 \ubc30\uc2e0&#8230; \ubcf4\uc548\ub9dd \ub6ab\uace0 \ub370\uc774\ud130 \uac00\ub85c\ucc44\ub294 \uce58\uba85\uc801 \uacb0\ud568 \ubc1c\uacac &#8211; \ubcf4\uc548\ub274\uc2a4"},"content":{"rendered":"<article>\n<h2>\ud575\uc2ec \uc694\uc57d<\/h2>\n<p>\ucd5c\uadfc \ud06c\ub86c(WebView) \uad6c\uc131\uc694\uc18c\uc5d0\uc11c \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589(RCE) \ucde8\uc57d\uc810\uc774 \ud655\uc778\ub3fc \ub370\uc774\ud130 \uac00\ub85c\ucc44\uae30 \uac00\ub2a5\uc131\uc774 \uc81c\uae30\ub410\ub2e4. \ud574\ub2f9 \ucde8\uc57d\uc810\uc740 CVE-2026-0628\ub85c \uba85\uba85\ub418\uc5c8\uace0, \uc601\ud5a5\uc744 \ubc1b\ub294 \ube4c\ub4dc\ub85c 143.0.7499.192\u00b7143.0.7499.193 \ub4f1\uc774 \ubcf4\uace0\ub410\ub2e4. \ubcf4\uc548\ud300\uc740 \uba54\ubaa8\ub9ac \ubcf4\uc548 \ub3c4\uad6c(ASAN)\ub85c \ubb38\uc81c\ub97c \uac80\ucd9c\ud588\uc73c\uba70, \ud328\uce58\ub41c \ubc84\uc804\uc73c\ub85c\uc758 \uc5c5\ub370\uc774\ud2b8\uac00 \uad8c\uace0\ub41c\ub2e4. \ud604\uc7ac\uae4c\uc9c0\uc758 \ubd84\uc11d\uc73c\ub85c\ub294 \uc545\uc131 \uc785\ub825\uc744 \ud1b5\ud574 \uad8c\ud55c \ubc94\uc704 \ub0b4\uc5d0\uc11c \uc784\uc758 \ucf54\ub4dc \uc2e4\ud589\uacfc \ub370\uc774\ud130 \uc720\ucd9c\uc774 \uac00\ub2a5\ud55c \uac83\uc73c\ub85c \ud3c9\uac00\ub41c\ub2e4.<\/p>\n<h2>\ud575\uc2ec \uc0ac\uc2e4<\/h2>\n<ul>\n<li>\ucde8\uc57d\uc810 \uc2dd\ubcc4\uc790: CVE-2026-0628\ub85c \ub4f1\ub85d\ub418\uc5c8\uc73c\uba70, \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589(RCE) \uac00\ub2a5\uc131\uc774 \ubcf4\uace0\ub418\uc5c8\ub2e4.<\/li>\n<li>\uc601\ud5a5 \ubc84\uc804: \ubcf4\uace0\ub41c \uc601\ud5a5 \ubc84\uc804\uc740 Chromium WebView \ube4c\ub4dc 143.0.7499.192 \ubc0f 143.0.7499.193 \ub4f1\uc774\ub2e4.<\/li>\n<li>\ubc1c\uacac \ubc29\ubc95: \uba54\ubaa8\ub9ac \uc624\ub958 \ud0d0\uc9c0 \ub3c4\uad6c\uc778 ASAN(AddressSanitizer)\ub97c \ud1b5\ud574 \ubb38\uc81c\ub97c \uc7ac\ud604\u00b7\uac80\ucd9c\ud588\ub2e4.<\/li>\n<li>\uc704\ud611 \ud589\uc704: \uc545\uc131 \uc785\ub825\uc744 \ud1b5\ud574 WebView \ub0b4\ubd80\uc5d0\uc11c \uc784\uc758 \ucf54\ub4dc \uc2e4\ud589\uacfc \ub370\uc774\ud130 \uc811\uadfc\u00b7\uc804\uc1a1\uc774 \uac00\ub2a5\ud560 \uc218 \uc788\ub2e4.<\/li>\n<li>\ud328\uce58 \uad8c\uace0: \ubcf4\uc548\ud300\uc740 \ucd5c\uc2e0 \ud328\uce58 \uc801\uc6a9\uc744 \uad8c\uace0\ud588\uc73c\uba70, \uc601\ud5a5\uc744 \ubc1b\ub294 \ube4c\ub4dc\uc5d0\uc11c \uc5c5\ub370\uc774\ud2b8\uac00 \ubc30\ud3ec\ub418\uace0 \uc788\ub2e4.<\/li>\n<li>\uacf5\uac1c\u00b7\ube44\uacf5\uac1c \uc5ec\ubd80: \ucde8\uc57d\uc810\uc740 \ubcf4\uc548 \uacf5\uc9c0\uc640 \ubcf4\uc548 \uc804\ubb38 \ub9e4\uccb4 \ubcf4\uc548\ub274\uc2a4 \ubcf4\ub3c4\ub97c \ud1b5\ud574 \uacf5\uac1c\ub418\uc5c8\ub2e4.<\/li>\n<\/ul>\n<h2>\uc0ac\uac74 \ubc30\uacbd<\/h2>\n<p>\ubaa8\ubc14\uc77c \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uac1c\ubc1c \ud658\uacbd\uc5d0\uc11c Chromium \uae30\ubc18 WebView\ub294 \uc678\ubd80 \ucf58\ud150\uce20\ub97c \ub80c\ub354\ub9c1\ud558\ub294 \ud575\uc2ec \uad6c\uc131\uc694\uc18c\ub85c \ub110\ub9ac \uc0ac\uc6a9\ub41c\ub2e4. WebView\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uc6f9 \uae30\uc220\uc744 \ud65c\uc6a9\ud560 \uc218 \uc788\uac8c \ud574\uc8fc\uc9c0\ub9cc, \uadf8\ub9cc\ud07c \ube0c\ub77c\uc6b0\uc800 \uc5d4\uc9c4\uc758 \ucde8\uc57d\uc810\uc774 \uc571 \ubcf4\uc548\uc5d0 \uc9c1\uc811\uc801\uc778 \uc601\ud5a5\uc744 \uc900\ub2e4. \uacfc\uac70\uc5d0\ub3c4 WebView \uad00\ub828 \ucde8\uc57d\uc810\uc774 \uc545\uc131 \uc571 \uc720\ud1b5\uc774\ub098 \uad8c\ud55c \ub0a8\uc6a9\uc73c\ub85c \uc774\uc5b4\uc838 \uc0ac\uc6a9\uc790 \ub370\uc774\ud130 \uce68\ud574\ub97c \ucd08\ub798\ud55c \uc0ac\ub840\uac00 \uc788\ub2e4. \uc774\ubc88 \uc0ac\ub840 \uc5ed\uc2dc \ub3d9\uc77c\ud55c \uad6c\uc870\uc801 \uc704\ud5d8\uc744 \ub4dc\ub7ec\ub0b4\uba70, \uac1c\ubc1c\uc790\u00b7\uc6b4\uc601\uc790\ub294 \uc5d4\uc9c4 \ubcf4\uc548 \ud53d\uc2a4 \uc801\uc6a9\uc5d0 \ubbfc\uac10\ud558\uac8c \ubc18\uc751\ud574\uc57c \ud55c\ub2e4.<\/p>\n<p>\ubcf4\uc548 \uc5f0\uad6c \ucee4\ubba4\ub2c8\ud2f0\uc5d0\uc11c\ub294 \uba54\ubaa8\ub9ac \uc548\uc804\uc131 \ubb38\uc81c\uac00 \ubaa8\ubc14\uc77c \uc0dd\ud0dc\uacc4 \uc804\ubc18\uc758 \uc704\ud5d8\uc73c\ub85c \uc774\uc5b4\uc9c8 \uc218 \uc788\ub2e4\uace0 \uc9c0\uc801\ud574\uc654\ub2e4. AddressSanitizer(ASAN) \uac19\uc740 \ub3c4\uad6c\ub294 \uac1c\ubc1c\u00b7\ud14c\uc2a4\ud2b8 \ub2e8\uacc4\uc5d0\uc11c \uba54\ubaa8\ub9ac \uc624\uc6a9\uc744 \ubc1c\uacac\ud558\ub294 \ub370 \uc720\ud6a8\ud558\uc9c0\ub9cc, \uc2e4\uc81c \uc6b4\uc601\ud658\uacbd\uc5d0\uc11c\ub294 \ubaa8\ub4e0 \ubcc0\uc218\ub97c \uc644\ubcbd\ud788 \uc7ac\ud604\ud558\uae30 \uc5b4\ub835\ub2e4. \ub610\ud55c WebView\ub294 \ub2e4\uc591\ud55c \uc571\uc5d0\uc11c \uc7ac\uc0ac\uc6a9\ub418\ubbc0\ub85c \ud558\ub098\uc758 \ucde8\uc57d\uc810\uc774 \ub2e4\uc218 \uc571\uc5d0 \ub3d9\uc2dc \uc601\ud5a5\uc744 \uc904 \uc218 \uc788\ub2e4\ub294 \uc810\uc774 \ucde8\uc57d\uc131 \uc2ec\uac01\ub3c4\ub97c \ub192\uc778\ub2e4. \uc774\ud574\uad00\uacc4\uc790\ub85c\ub294 \uad6c\uae00\u00b7\uc571 \uac1c\ubc1c\uc0ac\u00b7\ud50c\ub7ab\ud3fc \uc6b4\uc601\uc790\u00b7\ucd5c\uc885 \uc0ac\uc6a9\uc790\uac00 \ud3ec\ud568\ub41c\ub2e4.<\/p>\n<h2>\uc8fc\uc694 \uc0ac\uac74<\/h2>\n<p>\ubcf4\uc548\ubcf4\uace0\uc5d0 \ub530\ub974\uba74 \uc5f0\uad6c\uc790\ub4e4\uc740 ASAN\uc744 \ud65c\uc6a9\ud574 \uba54\ubaa8\ub9ac \uc624\ub958\ub97c \uc7ac\ud604\ud558\ub358 \uc911 \ud2b9\uc815 \uc785\ub825 \ucc98\ub9ac \uacfc\uc815\uc5d0\uc11c \uacbd\uacc4 \uac80\uc99d\uc774 \ub204\ub77d\ub3fc \uc784\uc758 \ucf54\ub4dc \uc2e4\ud589\uc774 \uac00\ub2a5\ud55c \uc0c1\ud0dc\ub97c \ud655\uc778\ud588\ub2e4. \uc774 \uacfc\uc815\uc5d0\uc11c \uacf5\uaca9\uc790\ub294 \ub80c\ub354\ub9c1\ub418\ub294 \ucf58\ud150\uce20\ub97c \uc870\uc791\ud574 WebView \ub0b4\ubd80 \uba54\ubaa8\ub9ac\ub97c \uc77d\uac70\ub098 \uc218\uc815\ud560 \uc218 \uc788\ub294 \uae38\uc774 \uc5f4\ub9b4 \uc218 \uc788\ub2e4. \uc2e4\ubb34 \ubd84\uc11d\uc5d0\uc11c\ub294 \uc774 \ucde8\uc57d\uc810\uc774 \uc6d0\uaca9\uc5d0\uc11c \uc545\uc758\uc801 \ud398\uc774\ub85c\ub4dc\ub97c \uc804\ub2ec\ud574 RCE\ub85c \uc774\uc5b4\uc9c8 \uac00\ub2a5\uc131\uc774 \ub192\ub2e4\uace0 \ud3c9\uac00\ub418\uc5c8\ub2e4.<\/p>\n<p>\ucde8\uc57d\uc810 \ubcf4\uace0 \uc9c1\ud6c4 Chromium \ubcf4\uc548\ud300 \ubc0f \ud50c\ub7ab\ud3fc \ubc30\ud3ec \ucc44\ub110\uc744 \ud1b5\ud574 \ud328\uce58\uac00 \uc900\ube44\ub418\uc5c8\uace0, \uc601\ud5a5\uc774 \ud655\uc778\ub41c \ube4c\ub4dc(\uc608: 143.0.7499.192\u00b7143.0.7499.193)\uc5d0 \ub300\ud574 \uc5c5\ub370\uc774\ud2b8\uac00 \uad8c\uace0\ub418\uc5c8\ub2e4. \uac1c\ubc1c\uc0ac\ub4e4\uc740 WebView\ub97c \ub0b4\uc7a5\ud55c \uc571\uc5d0 \ub300\ud574 \uc5d4\uc9c4 \uc5c5\ub370\uc774\ud2b8\ub97c \ubc30\ud3ec\ud558\uac70\ub098, \uac00\ub2a5\ud55c \uacbd\uc6b0 \ucf58\ud150\uce20 \ucc98\ub9ac \ubc29\uc2dd\uc744 \uac15\ud654\ud558\ub77c\ub294 \uad8c\uace0\ub97c \ubc1b\uace0 \uc788\ub2e4. \ud604\uc7a5 \ud0d0\uc9c0 \uc0ac\ub840\uc5d0\uc11c\ub294 \uacf5\uaca9\uc774 \ub300\uaddc\ubaa8 \uc790\ub3d9\ud654 \ud615\ud0dc\ub85c \ud655\uc0b0\ub41c \uc99d\uac70\ub294 \uc544\uc9c1 \ud655\uc778\ub418\uc9c0 \uc54a\uc558\ub2e4.<\/p>\n<p>\ud55c\ud3b8, \uc77c\ubd80 \ubcf4\uc548 \uc5c5\uccb4\ub294 \ucde8\uc57d\uc810\uc774 \uc545\uc6a9\ub420 \uacbd\uc6b0 \ubbfc\uac10 \uc815\ubcf4(\uc138\uc158 \ud1a0\ud070\u00b7\ucfe0\ud0a4\u00b7\ub85c\uceec \uc2a4\ud1a0\ub9ac\uc9c0 \ub4f1)\uac00 \uc678\ubd80\ub85c \ub178\ucd9c\ub420 \uc218 \uc788\ub2e4\uace0 \uacbd\uace0\ud588\ub2e4. \uc774\ub7ec\ud55c \ub370\uc774\ud130\ub294 \uc0ac\uc6a9\uc790\uc758 \uc778\uc99d \uc0c1\ud0dc\ub97c \ud0c8\ucde8\ud558\uac70\ub098 \ucd94\uac00 \uc545\uc131 \ud589\uc704\ub97c \uc704\ud55c \ubc1c\ud310\uc73c\ub85c \uc0ac\uc6a9\ub420 \uac00\ub2a5\uc131\uc774 \uc788\ub2e4. \ub530\ub77c\uc11c \uc0ac\uc6a9\uc790 \uc218\uc900\uc5d0\uc11c\ub3c4 \ube0c\ub77c\uc6b0\uc800\u00b7\uc571 \uc5c5\ub370\uc774\ud2b8\ub97c \uc2e0\uc18d\ud788 \uc801\uc6a9\ud558\ub294 \uac83\uc774 \uc911\uc694\ud558\ub2e4\uace0 \uad8c\uace0\ub41c\ub2e4.<\/p>\n<h2>\ubd84\uc11d \ubc0f \uc758\ubbf8<\/h2>\n<p>\uc774\ubc88 \ucde8\uc57d\uc810\uc740 \ube0c\ub77c\uc6b0\uc800 \uc5d4\uc9c4\uc758 \uba54\ubaa8\ub9ac \ucc98\ub9ac \uacfc\uc815\uc5d0\uc11c \ubc1c\uc0dd\ud55c \uc624\ub958\uac00 \uc571 \ubcf4\uc548\uc73c\ub85c \uc9c1\uc811 \uc5f0\uacb0\ub418\ub294 \uc804\ud615\uc801 \uc0ac\ub840\ub97c \ubcf4\uc5ec\uc900\ub2e4. WebView\ub294 \uc571 \ub0b4\ubd80\uc5d0\uc11c \uc6f9 \ucf58\ud150\uce20\ub97c \uc2e4\ud589\ud558\uae30 \ub54c\ubb38\uc5d0 \uc5d4\uc9c4\uc758 \ud55c\uacc4\uac00 \uace7 \uc571\uc758 \ucde8\uc57d\uc810\uc774 \ub41c\ub2e4. \ud2b9\ud788 \ubaa8\ubc14\uc77c \ud658\uacbd\uc5d0\uc11c\ub294 \uc6b4\uc601\uccb4\uc81c\u00b7\uc571 \uad8c\ud55c \ubaa8\ub378\uc5d0 \ub530\ub77c \uacf5\uaca9\uc758 \ubc94\uc704\uc640 \uc601\ud5a5 \uc815\ub3c4\uac00 \ub2ec\ub77c\uc9c8 \uc218 \uc788\uc5b4, \ub2e8\uc77c \ucde8\uc57d\uc810\uc774\ub77c\ub3c4 \uad11\ubc94\uc704\ud55c \ud53c\ud574\ub85c \ud655\uc0b0\ub420 \uc5ec\uc9c0\uac00 \uc788\ub2e4.<\/p>\n<p>\uacbd\uc81c\uc801 \uce21\uba74\uc5d0\uc11c \ubcf4\uba74 \ub300\uaddc\ubaa8 \uc571 \uc0dd\ud0dc\uacc4\uc5d0 \ud3ec\ud568\ub41c \uc5d4\uc9c4 \ucde8\uc57d\uc810\uc740 \ud328\uce58\u00b7\ud14c\uc2a4\ud2b8\u00b7\ubc30\ud3ec \uacfc\uc815\uc5d0\uc11c \uc0c1\ub2f9\ud55c \ube44\uc6a9\uacfc \uc2dc\uac04\uc774 \uc18c\uc694\ub41c\ub2e4. \uae30\uc5c5\ub4e4\uc740 \uae34\uae09 \ud328\uce58 \ubc30\ud3ec\uc640 \uc0ac\uc6a9\uc790 \uc548\ub0b4\uc5d0 \ub9ac\uc18c\uc2a4\ub97c \ud22c\uc785\ud574\uc57c \ud558\uba70, \ud328\uce58\uac00 \ub2a6\uc5b4\uc9c8\uc218\ub85d \uc2e0\ub8b0\ub3c4 \uc190\uc0c1\uacfc \uaddc\uc81c \ub9ac\uc2a4\ud06c\uac00 \ucee4\uc9c4\ub2e4. \ub610\ud55c \ubcf4\uc548 \uc0ac\uace0 \ubc1c\uc0dd \uc2dc \ud53c\ud574 \ubcf4\uc0c1 \ubc0f \ubc95\uc801 \ub300\uc751 \uac00\ub2a5\uc131\ub3c4 \ubc30\uc81c\ud560 \uc218 \uc5c6\ub2e4.<\/p>\n<p>\uc815\ucc45\uc801\u00b7\uad6d\uac00\uc801 \uad00\uc810\uc5d0\uc11c\ub294 \uc8fc\uc694 \ud50c\ub7ab\ud3fc \uad6c\uc131\uc694\uc18c\uc758 \ucde8\uc57d\uc810\uc774 \uad6d\uac00 \uc911\uc694 \uc815\ubcf4 \uc778\ud504\ub77c \ubc0f \uac1c\uc778 \ub370\uc774\ud130 \ubcf4\ud638\uc5d0 \ubbf8\uce58\ub294 \uc601\ud5a5\uc744 \uc7ac\uac80\ud1a0\ud574\uc57c \ud55c\ub2e4. \ud2b9\ud788 WebView\ucc98\ub7fc \ud0c0\uc0ac \ucf54\ub4dc\uac00 \uad11\ubc94\uc704\ud558\uac8c \uc7ac\uc0ac\uc6a9\ub418\ub294 \ucef4\ud3ec\ub10c\ud2b8\ub294 \uacf5\uae09\ub9dd \ubcf4\uc548(Supply Chain Security) \uad00\uc810\uc5d0\uc11c \uc6b0\uc120 \uad00\ub9ac \ub300\uc0c1\uc774 \ub41c\ub2e4. \uc55e\uc73c\ub85c \ud50c\ub7ab\ud3fc \uc0ac\uc5c5\uc790\uc640 \uc571 \uac1c\ubc1c\uc0ac \uac04\uc758 \ubcf4\uc548 \uacf5\uc870 \uccb4\uacc4 \uac15\ud654\uac00 \uc694\uad6c\ub41c\ub2e4.<\/p>\n<h2>\ube44\uad50 \ubc0f \ub370\uc774\ud130<\/h2>\n<figure>\n<table>\n<thead>\n<tr>\n<th>\ud56d\ubaa9<\/th>\n<th>\uc601\ud5a5 \ube4c\ub4dc<\/th>\n<th>\ud328\uce58 \uc0c1\ud0dc(\uad8c\uace0)<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\ubcf4\uace0\ub41c \ucde8\uc57d\uc810<\/td>\n<td>143.0.7499.192 \/ 143.0.7499.193<\/td>\n<td>\uc989\uc2dc \uc5c5\ub370\uc774\ud2b8 \uad8c\uace0<\/td>\n<\/tr>\n<tr>\n<td>\ud0d0\uc9c0 \ub3c4\uad6c<\/td>\n<td>ASAN(AddressSanitizer)<\/td>\n<td>\uac1c\ubc1c\u00b7\ud14c\uc2a4\ud2b8 \ub2e8\uacc4 \uc0ac\uc6a9 \uad8c\uc7a5<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n<p>\uc704 \ud45c\ub294 \ubcf4\ub3c4\uc640 \ubcf4\uc548 \uacf5\uc9c0\uc5d0\uc11c \ud655\uc778\ub41c \uc601\ud5a5 \ube4c\ub4dc\uc640 \uad8c\uace0 \uc870\uce58 \uc694\uc57d\uc774\ub2e4. \uc2e4\uc81c \ud328\uce58 \ubc30\ud3ec \uc2dc\uc810\uacfc \uc801\uc6a9 \ubc94\uc704\ub294 \ud50c\ub7ab\ud3fc\u00b7\ub514\ubc14\uc774\uc2a4 \uc81c\uc870\uc0ac\u00b7\uc571 \uac1c\ubc1c\uc0ac\ubcc4\ub85c \ub2e4\ub974\ubbc0\ub85c \uac01 \uc8fc\uccb4\uc758 \uacf5\uc9c0\ub97c \ud655\uc778\ud574\uc57c \ud55c\ub2e4. \ud2b9\ud788 \uc77c\ubd80 \uc571\uc740 \uc2dc\uc2a4\ud15c WebView\uac00 \uc544\ub2cc \ub3c5\ub9bd\uc801\uc778 Chromium \ud3ec\ud06c\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc5b4, \uac1c\ubcc4 \uc571\uc758 \uc5c5\ub370\uc774\ud2b8 \uc815\ucc45\uc744 \ub530\ub85c \uc810\uac80\ud574\uc57c \ud55c\ub2e4. \uc0ac\uc6a9\uc790\ub294 \uc6b4\uc601\uccb4\uc81c \ubc0f \uc571\uc758 \ucd5c\uc2e0 \ubcf4\uc548 \uc5c5\ub370\uc774\ud2b8 \uc801\uc6a9 \uc5ec\ubd80\ub97c \uc6b0\uc120 \ud655\uc778\ud574\uc57c \ud55c\ub2e4.<\/p>\n<h2>\ubc18\uc751 \ubc0f \uc778\uc6a9<\/h2>\n<p>Chromium \ubcf4\uc548\ud300\uc740 \ucde8\uc57d\uc810 \ubcf4\uace0 \uc9c1\ud6c4 \ud328\uce58 \uad8c\uace0\ub97c \ubc1c\ud45c\ud588\uace0, \uacf5\uac1c \uc124\uba85\uc5d0\uc11c \ucde8\uc57d\uc131\uc758 \uc2ec\uac01\uc131\uc744 \uc778\uc815\ud588\ub2e4. \uc544\ub798 \uc778\uc6a9\uc740 \ubc1c\ud45c \ub9e5\ub77d\uc5d0\uc11c \uc694\uc57d\ud55c \uac83\uc774\ub2e4.<\/p>\n<blockquote>\n<p>\ud574\ub2f9 \ubb38\uc81c\ub294 \uba54\ubaa8\ub9ac \ucc98\ub9ac \uacfc\uc815\uc758 \uacb0\ud568\uc73c\ub85c, \uc2e0\uc18d\ud55c \ud328\uce58 \uc801\uc6a9\uc744 \uad8c\uace0\ud569\ub2c8\ub2e4.<\/p>\n<p><cite>Chromium \ubcf4\uc548\ud300(\uacf5\uc2dd \ubc1c\ud45c \uc694\uc57d)<\/cite><\/p><\/blockquote>\n<p>\ud55c \ubcf4\uc548 \uc5f0\uad6c\uc790\ub294 \ucde8\uc57d\uc810\uc758 \uc545\uc6a9 \uac00\ub2a5\uc131\uc5d0 \ub300\ud574 \uacbd\uace0\ud558\uba70, \uac1c\ubc1c\uc790\uc640 \uc0ac\uc6a9\uc790\uc758 \uc2e0\uc18d\ud55c \ub300\uc751 \ud544\uc694\uc131\uc744 \uac15\uc870\ud588\ub2e4.<\/p>\n<blockquote>\n<p>WebView\uc5d0 \uc758\uc874\ud558\ub294 \uc571\uc774 \ub9ce\uc740 \ub9cc\ud07c, \ud55c \uac74\uc758 \uc5d4\uc9c4 \ucde8\uc57d\uc810\uc774 \uad11\ubc94\uc704\ud55c \uc601\ud5a5\uc73c\ub85c \uc774\uc5b4\uc9c8 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<p><cite>\ubcf4\uc548\uc5f0\uad6c\uc790(\uc5f0\uad6c \ucee4\ubba4\ub2c8\ud2f0 \ubc1c\uc5b8 \uc694\uc57d)<\/cite><\/p><\/blockquote>\n<p>\uc77c\ubd80 \uc0ac\uc6a9\uc790\u00b7\uac1c\ubc1c\uc790 \ucee4\ubba4\ub2c8\ud2f0\uc5d0\uc11c\ub294 \ud328\uce58 \ubc30\ud3ec \uc18d\ub3c4\uc640 \ubc30\ud3ec \ubc29\uc2dd\uc5d0 \ub300\ud55c \uc6b0\ub824\uac00 \uc81c\uae30\ub418\uc5c8\uace0, \ud50c\ub7ab\ud3fc \uc0ac\uc5c5\uc790\uc5d0\uac8c \ub354 \uba85\ud655\ud55c \uac00\uc774\ub4dc\ub77c\uc778\uc744 \uc694\uad6c\ud558\ub294 \ubaa9\uc18c\ub9ac\uac00 \ub098\uc624\uace0 \uc788\ub2e4.<\/p>\n<blockquote>\n<p>\uc5c5\ub370\uc774\ud2b8\uac00 \uc2e0\uc18d\ud788 \uc801\uc6a9\ub418\uc9c0 \uc54a\ub294 \uacbd\uc6b0, \uc0ac\uc6a9\uc790 \ub370\uc774\ud130 \ubcf4\ud638\uc5d0 \uacf5\ubc31\uc774 \ubc1c\uc0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<p><cite>\uc571 \uac1c\ubc1c\uc790 \ucee4\ubba4\ub2c8\ud2f0 \ub300\ud45c(\uc694\uc57d)<\/cite><\/p><\/blockquote>\n<aside>\n<details>\n<summary>\uc6a9\uc5b4\/\ubc29\ubc95\ub860<\/summary>\n<p>WebView\ub294 \ubaa8\ubc14\uc77c \uc571 \ub0b4\uc5d0\uc11c \uc6f9 \ucf58\ud150\uce20\ub97c \ub80c\ub354\ub9c1\ud558\ub294 \uc5d4\uc9c4\uc73c\ub85c, Chromium \uae30\ubc18 \uad6c\ud604\uc774 \ub110\ub9ac \uc0ac\uc6a9\ub41c\ub2e4. RCE(Remote Code Execution)\ub294 \uc6d0\uaca9\uc5d0\uc11c \uc545\uc131 \ucf54\ub4dc\ub97c \uc2e4\ud589\ud560 \uc218 \uc788\ub294 \ucde8\uc57d\uc131\uc744 \ub9d0\ud558\uba70, \uc774\ub294 \uc2dc\uc2a4\ud15c \uad8c\ud55c \ubc94\uc704\uc5d0 \ub530\ub77c \uc2ec\uac01\ud55c \ud53c\ud574\ub97c \ucd08\ub798\ud560 \uc218 \uc788\ub2e4. ASAN(AddressSanitizer)\uc740 \uba54\ubaa8\ub9ac \uc624\ub958(\ubc84\ud37c \uc624\ubc84\ud50c\ub85c\u00b7\ud799\/\uc2a4\ud0dd \uc0ac\uc6a9 \uc624\ub958 \ub4f1)\ub97c \ud0d0\uc9c0\ud558\ub294 \uac1c\ubc1c\uc790 \ub3c4\uad6c\ub85c, \ucde8\uc57d\uc810 \uc7ac\ud604\uacfc \uc6d0\uc778 \uaddc\uba85\uc5d0 \ud65c\uc6a9\ub41c\ub2e4. \ud328\uce58 \uc801\uc6a9 \uc2dc\uc5d0\ub294 \uc5d4\uc9c4 \ubc84\uc804\ubfd0 \uc544\ub2c8\ub77c \uc571\uc758 \ud1b5\ud569 \ubc29\uc2dd(\uc2dc\uc2a4\ud15c WebView \uc0ac\uc6a9 \uc5ec\ubd80)\uc744 \ud568\uaed8 \uc810\uac80\ud574\uc57c \ud55c\ub2e4. \uacf5\uae09\ub9dd \uce21\uba74\uc5d0\uc11c\ub294 \uc5d4\uc9c4 \uc5c5\ub370\uc774\ud2b8\uc758 \ubc30\ud3ec\u00b7\uc801\uc6a9 \uacfc\uc815\uc774 \ubcf4\uc548\uc758 \uc911\uc694\ud55c \uace0\ub9ac\uac00 \ub41c\ub2e4.<\/p>\n<\/details>\n<\/aside>\n<h2>\ubd88\ud655\uc2e4\ud55c \ubd80\ubd84<\/h2>\n<ul>\n<li>\uacf5\uaca9\uc758 \uc2e4\uc81c \uc545\uc6a9 \uc0ac\ub840 \ubc1c\uacac \uc5ec\ubd80\ub294 \uacf5\uac1c\ub41c \ubcf4\uace0\uc5d0\uc11c \uba85\ud655\ud788 \ud655\uc778\ub418\uc9c0 \uc54a\uc558\ub2e4; \uacf5\uac1c \uc0ac\ub840\ub294 \uc544\uc9c1 \uc81c\ud55c\uc801\uc774\ub2e4.<\/li>\n<li>\uc77c\ubd80 \ubcf4\ub3c4\uc5d0\uc11c \uc601\ud5a5 \ube4c\ub4dc \ubaa9\ub85d\uc774 \uc0c1\uc774\ud558\uac8c \uc81c\uc2dc\ub418\ub294\ub370, \ucd5c\uc885 \uc601\ud5a5 \ubc94\uc704\ub294 \ud50c\ub7ab\ud3fc\ubcc4 \ucd94\uac00 \ud655\uc778\uc774 \ud544\uc694\ud558\ub2e4.<\/li>\n<\/ul>\n<h2>\ucd1d\ud3c9<\/h2>\n<p>\uc774\ubc88 CVE-2026-0628 \ubcf4\uace0\ub294 WebView \uac19\uc740 \ud575\uc2ec \uad6c\uc131\uc694\uc18c\uc758 \ucde8\uc57d\uc810\uc774 \uc571\u00b7\uc0ac\uc6a9\uc790 \ub370\uc774\ud130 \ubcf4\uc548\uc5d0 \uc9c1\uacb0\ub428\uc744 \ub2e4\uc2dc \ud655\uc778\uc2dc\ucf30\ub2e4. \uae30\uc220\uc801 \ub300\uc751\uc73c\ub85c\uc11c \ud328\uce58 \uc801\uc6a9\uacfc \ud568\uaed8, \uac1c\ubc1c\uc790\ub294 \uc785\ub825 \uac80\uc99d\u00b7\uad8c\ud55c \ucd5c\uc18c\ud654 \ub4f1 \ubc29\uc5b4\uce35\uc744 \ubcf4\uc644\ud574\uc57c \ud55c\ub2e4. \ud50c\ub7ab\ud3fc \uc0ac\uc5c5\uc790\uc640 \uc571 \uc0dd\ud0dc\uacc4 \ucc38\uc5ec\uc790\ub4e4\uc740 \ud328\uce58 \ubc30\ud3ec\uc758 \uc18d\ub3c4\uc640 \uac00\uc2dc\uc131\uc744 \ub192\uc5ec \uc0ac\uc6a9\uc790 \ubcf4\ud638 \uacf5\ubc31\uc744 \uc904\uc5ec\uc57c \ud55c\ub2e4.<\/p>\n<p>\uc0ac\uc6a9\uc790\ub294 \uac00\ub2a5\ud55c \ud55c \ube60\ub974\uac8c \ube0c\ub77c\uc6b0\uc800\uc640 \uc571\uc744 \uc5c5\ub370\uc774\ud2b8\ud558\uace0, \ucd9c\ucc98 \ubd88\ubd84\uba85\ud55c \uc571 \uc124\uce58\ub97c \uc790\uc81c\ud574\uc57c \ud55c\ub2e4. \uae30\uc5c5\u00b7\uae30\uad00\uc740 \ub0b4\ubd80\uc5d0\uc11c WebView\ub97c \uc0ac\uc6a9\ud558\ub294 \uc571 \ubaa9\ub85d\uc744 \uc810\uac80\ud558\uace0, \uae34\uae09 \ub300\uc751 \uacc4\ud68d\uc744 \uc218\ub9bd\ud574 \ube44\uc2b7\ud55c \uacf5\uae09\ub9dd \ucde8\uc57d\uc810\uc5d0 \ub300\ube44\ud574\uc57c \ud55c\ub2e4.<\/p>\n<h2>\ucd9c\ucc98<\/h2>\n<ul>\n<li><a href=\"https:\/\/www.boannews.com\/media\/view.asp?idx=141387&#038;page=1&#038;kind=1\" target=\"_blank\" rel=\"noopener\">\ubcf4\uc548\ub274\uc2a4<\/a> (\uc5b8\ub860 \ubcf4\ub3c4)<\/li>\n<li><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-0628\" target=\"_blank\" rel=\"noopener\">CVE-2026-0628<\/a> (CVE \ub4f1\ub85d, \uacf5\uc2dd)<\/li>\n<li><a href=\"https:\/\/chromereleases.googleblog.com\/\" target=\"_blank\" rel=\"noopener\">Chrome Releases \ube14\ub85c\uadf8<\/a> (\uacf5\uc2dd \ubc30\ud3ec\/\ubcf4\uc548 \uacf5\uc9c0)<\/li>\n<\/ul>\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>\ud575\uc2ec \uc694\uc57d \ucd5c\uadfc \ud06c\ub86c(WebView) \uad6c\uc131\uc694\uc18c\uc5d0\uc11c \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589(RCE) \ucde8\uc57d\uc810\uc774 \ud655\uc778\ub3fc \ub370\uc774\ud130 \uac00\ub85c\ucc44\uae30 \uac00\ub2a5\uc131\uc774 \uc81c\uae30\ub410\ub2e4. \ud574\ub2f9 \ucde8\uc57d\uc810\uc740 CVE-2026-0628\ub85c \uba85\uba85\ub418\uc5c8\uace0, \uc601\ud5a5\uc744 \ubc1b\ub294 \ube4c\ub4dc\ub85c 143.0.7499.192\u00b7143.0.7499.193 \ub4f1\uc774 \ubcf4\uace0\ub410\ub2e4. \ubcf4\uc548\ud300\uc740 \uba54\ubaa8\ub9ac \ubcf4\uc548 \ub3c4\uad6c(ASAN)\ub85c \ubb38\uc81c\ub97c \uac80\ucd9c\ud588\uc73c\uba70, \ud328\uce58\ub41c \ubc84\uc804\uc73c\ub85c\uc758 \uc5c5\ub370\uc774\ud2b8\uac00 \uad8c\uace0\ub41c\ub2e4. \ud604\uc7ac\uae4c\uc9c0\uc758 \ubd84\uc11d\uc73c\ub85c\ub294 \uc545\uc131 \uc785\ub825\uc744 \ud1b5\ud574 \uad8c\ud55c \ubc94\uc704 \ub0b4\uc5d0\uc11c \uc784\uc758 \ucf54\ub4dc \uc2e4\ud589\uacfc \ub370\uc774\ud130 \uc720\ucd9c\uc774 \uac00\ub2a5\ud55c \uac83\uc73c\ub85c \ud3c9\uac00\ub41c\ub2e4. \ud575\uc2ec \uc0ac\uc2e4 \ucde8\uc57d\uc810 \uc2dd\ubcc4\uc790: CVE-2026-0628\ub85c &#8230; <a title=\"\ud06c\ub86c \uc6f9\ubdf0\uc758 \ubc30\uc2e0&#8230; \ubcf4\uc548\ub9dd \ub6ab\uace0 \ub370\uc774\ud130 \uac00\ub85c\ucc44\ub294 \uce58\uba85\uc801 \uacb0\ud568 \ubc1c\uacac &#8211; \ubcf4\uc548\ub274\uc2a4\" class=\"read-more\" href=\"https:\/\/readtrends.com\/ko\/chrome-webview-rce\/\" aria-label=\"\ud06c\ub86c \uc6f9\ubdf0\uc758 \ubc30\uc2e0&#8230; \ubcf4\uc548\ub9dd \ub6ab\uace0 \ub370\uc774\ud130 \uac00\ub85c\ucc44\ub294 \uce58\uba85\uc801 \uacb0\ud568 \ubc1c\uacac &#8211; \ubcf4\uc548\ub274\uc2a4\uc5d0 \ub300\ud574 \ub354 \uc790\uc138\ud788 \uc54c\uc544\ubcf4\uc138\uc694\">\ub354 \uc77d\uae30<\/a><\/p>\n","protected":false},"author":1,"featured_media":6432,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_title":"\ud06c\ub86c \uc6f9\ubdf0 \uce58\uba85\uc801 \uacb0\ud568 \ubc1c\uacac \u2014 \ub370\uc774\ud130 \uac00\ub85c\ucc44\uae30 \uc6b0\ub824 | \ubcf4\uc548\ub274\uc2a4","rank_math_description":"\ud06c\ub86c WebView\uc5d0\uc11c CVE-2026-0628\ub85c \ubd84\ub958\ub41c RCE \ucde8\uc57d\uc810\uc774 \ud655\uc778\ub410\ub2e4. ASAN\uc73c\ub85c \ud0d0\uc9c0\ub41c \uc774 \uacb0\ud568\uc740 \ub370\uc774\ud130 \uac00\ub85c\ucc44\uae30 \uac00\ub2a5\uc131\uc774 \uc788\uc5b4 \uc989\uc2dc \ud328\uce58 \uc801\uc6a9\uc774 \uad8c\uace0\ub41c\ub2e4.","rank_math_focus_keyword":"\ud06c\ub86c \uc6f9\ubdf0,RCE,CVE-2026-0628,\ub370\uc774\ud130 \uac00\ub85c\ucc44\uae30,\ubcf4\uc548\ud328\uce58","footnotes":""},"categories":[2],"tags":[],"class_list":["post-6439","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-top-stories"],"_links":{"self":[{"href":"https:\/\/readtrends.com\/ko\/wp-json\/wp\/v2\/posts\/6439","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/readtrends.com\/ko\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/readtrends.com\/ko\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/readtrends.com\/ko\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/readtrends.com\/ko\/wp-json\/wp\/v2\/comments?post=6439"}],"version-history":[{"count":0,"href":"https:\/\/readtrends.com\/ko\/wp-json\/wp\/v2\/posts\/6439\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/readtrends.com\/ko\/wp-json\/wp\/v2\/media\/6432"}],"wp:attachment":[{"href":"https:\/\/readtrends.com\/ko\/wp-json\/wp\/v2\/media?parent=6439"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/readtrends.com\/ko\/wp-json\/wp\/v2\/categories?post=6439"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/readtrends.com\/ko\/wp-json\/wp\/v2\/tags?post=6439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}