Skip to content
OpenAdvisories
High · 7.5 CVE-2026-1220 EUVD-2026-36108GHSA-hx3f-67qp-m43r

Race in V8 in Google Chrome prior to 144.0.7559.99 allowed a remote attacker to potentially exploit type confusion via a crafted HTML page.…

Published Jun 10, 2026 · Updated Jun 11, 2026 · Assigned by Chrome

Description

Race in V8 in Google Chrome prior to 144.0.7559.99 allowed a remote attacker to potentially exploit type confusion via a crafted HTML page. (Chromium security severity: High)

Affected products

VendorProductAffectedFixed
Google Chrome 144.0.7559.99 – < 144.0.7559.99 144.0.7559.99

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 144.0.7559.96-1 —
Debian 13 chromium 144.0.7559.96-1~deb13u1 DSA-6108-1
Debian 12 chromium 144.0.7559.96-1~deb12u1 DSA-6108-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 144.0.7559.96-1.1 openSUSE-SU-2026:10084-1
openSUSE Leap 16.0 chromium 144.0.7559.132-bp160.1.1 openSUSE-SU-2026:20183-1
ReleasePackageFixed inAdvisory
Alpine v3.24 qt6-qtwebengine 6.10.1-r7 —
Alpine v3.23 qt6-qtwebengine 6.10.1-r3 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling chromium 144.0.7559.99-r0 —

Advisories 4

References