PT-2026-3767 · Google · Google Chrome

CVE-2026-1220 · Published 2026-01-01 · Updated 2026-06-12

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 144.0.7559.96/.97

Description The software contains a high-severity race condition within the V8 JavaScript engine. This condition can be triggered through specially crafted web content, potentially leading to memory corruption and code execution. V8 flaws are frequently targeted in real-world exploit chains, posing a significant risk.

Recommendations Update Google Chrome to version 144.0.7559.96 or 144.0.7559.97.

Exploit

Fix

DoS

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2026-00983

CVE-2026-1220

OPENSUSE-SU-2026:10084-1

OPENSUSE-SU-2026:20103-1

Affected Products

Google Chrome

References · 25

• 🔥 https://issues.chromium.org/issues/473851441 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1220 · Security Note
• https://bdu.fstec.ru/vul/2026-00983 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10084-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1220 · Security Note
• https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_20.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20103-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-1220 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se48-bulletin-2026-0709SE48HF · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0423SE18MD · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-1220 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-1220 · Note
• https://t.me/msrcreports/3010 · Telegram Post