CVE-2026-0902
BaseFortify
Publication date: 2026-01-20
Last updated on: 2026-01-29
Assigner: Chrome
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| chrome | to 144.0.7559.59 (exc) | |
| linux | linux_kernel | * |
| microsoft | windows | * |
| chrome | to 144.0.7559.60 (exc) | |
| apple | macos | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-474 | The code uses a function that has inconsistent implementations across operating systems and versions. |
Attack-Flow Graph
AI Powered Q&A
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update Google Chrome to version 144.0.7559.59 or later, as the issue is fixed in that version.
Can you explain this vulnerability to me?
This vulnerability is an inappropriate implementation in the V8 engine of Google Chrome versions prior to 144.0.7559.59. It allows a remote attacker to perform an out of bounds memory read by using a specially crafted HTML page.
How can this vulnerability impact me? :
The vulnerability can allow a remote attacker to read memory outside the intended bounds, which may lead to exposure of sensitive information or other security issues within the affected browser.