Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-0905 EUVD-2026-3475GHSA-jq9g-gj4g-q8w7

Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to pot…

Published Jan 20, 2026 · Updated Jan 20, 2026 · Assigned by Chrome

Description

Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain potentially sensitive information via a network log file. (Chromium security severity: Medium)

Affected products

VendorProductAffectedFixed
Google Chrome 144.0.7559.59 – < 144.0.7559.59 144.0.7559.59

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 144.0.7559.59-1 —
Debian 13 chromium 144.0.7559.59-1~deb13u1 DSA-6100-1
Debian 12 chromium 144.0.7559.59-1~deb12u1 DSA-6100-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 144.0.7559.59-1.1 openSUSE-SU-2026:10057-1
openSUSE Leap 16.0 chromium 144.0.7559.132-bp160.1.1 openSUSE-SU-2026:20183-1
ReleasePackageFixed inAdvisory
Alpine v3.24 qt6-qtwebengine 6.10.1-r6 —
Alpine v3.23 qt6-qtwebengine 6.10.1-r2 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling chromium 144.0.7559.109-r0 —

Advisories 4

References