PT-2026-2655 · Google+1 · Google Chrome+1

P1Nky4745 · Published 2025-11-08 · Updated 2026-03-10 · CVE-2026-0899

Positive Technologies · (AI Summary)

CVSS v2.0

10

High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 144.0.7559.59

Description An out-of-bounds memory access issue exists in the V8 JavaScript engine component of Google Chrome. This flaw could allow a remote attacker to potentially exploit object corruption through a specially crafted HTML page, potentially leading to arbitrary code execution. The vulnerability affects a large number of Google Chrome users worldwide. Multiple reports indicate the potential for remote code execution (RCE) via drive-by compromise. The issue involves memory corruption within the V8 engine when processing JavaScript code.

Recommendations Update Google Chrome to version 144.0.7559.59 or later.

Fix

RCE

Memory Corruption

Buffer Overflow

Out of bounds Read

Weakness Enumeration

CWE-787

CWE-119

CWE-125

Related Identifiers

BDU:2026-00514

CVE-2026-0899

Affected Products

Google Chrome

Red Os

References · 30

• https://osv.dev/vulnerability/CVE-2026-0899 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0899 · Security Note
• https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/729044 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-0899 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-0899 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00514 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-0899 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2013611003469066591 · Twitter Post
• https://cybersecuritynews.com/chrome-144-released · Note
• https://t.me/cveNotify/149264 · Telegram Post
• https://twitter.com/TheRabbitPy/status/2031121137329967120 · Twitter Post
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-0899 · Note
• https://issues.chromium.org/issues/458914193 · Note
• https://twitter.com/cracbot/status/2015379164170510593 · Twitter Post