Skip to content
OpenAdvisories
High · 8.8 CVE-2026-0900 EUVD-2026-3452GHSA-9j7r-xv46-hxx9

Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corrupti…

Published Jan 20, 2026 · Updated Feb 26, 2026 · Assigned by Chrome

Description

Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)

Affected products

VendorProductAffectedFixed
Google Chrome 144.0.7559.59 – < 144.0.7559.59 144.0.7559.59

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 144.0.7559.59-1 —
Debian 13 chromium 144.0.7559.59-1~deb13u1 DSA-6100-1
Debian 12 chromium 144.0.7559.59-1~deb12u1 DSA-6100-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 144.0.7559.59-1.1 openSUSE-SU-2026:10057-1
openSUSE Leap 16.0 chromium 144.0.7559.132-bp160.1.1 openSUSE-SU-2026:20183-1

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling chromium 144.0.7559.109-r0 —

Advisories 4

References