CVE-2026-0899

Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML…

High · published January 20, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
34.0
In the wild
Unconfirmed
What it is

🚨 An out-of-bounds memory access flaw is lurking in V8 of Google Chrome before version 144.0.7559.59, and it could let attackers corrupt objects with just a crafted HTML page! ⚡ Think of it like a restaurant kitchen where the head chef is busy preparing meals, but a sneaky waiter slips in an incorrect order that throws off the whole process. The result? A chaotic kitchen where anything can happen, and anyone could get served the wrong dish—or worse! This vulnerability poses a significant risk, potentially allowing attackers to manipulate memory objects in a way that could lead to crashes or even remote code execution. If exploited, it may compromise users' security and privacy, making it an absolute treasure trove for malicious actors lurking in the digital shadows.

Put simply

Think of it like a restaurant kitchen where the head chef is busy preparing meals, but a sneaky waiter slips in an incorrect order that throws off the whole process. The result? A chaotic kitchen where anything can happen, and anyone could get served the wrong dish—or worse! The issue arises from improper handling of memory access in the V8 JavaScript engine, leading to possible object corruption when a malicious HTML page is rendered. Essentially, this flaw can allow an attacker to read or write memory beyond the intended boundaries.

What to do

This vulnerability poses a significant risk, potentially allowing attackers to manipulate memory objects in a way that could lead to crashes or even remote code execution. If exploited, it may compromise users' security and privacy, making it an absolute treasure trove for malicious actors lurking in the digital shadows. To protect yourself, update your Google Chrome to version 144.0.7559.59 or later immediately. Regularly check for updates to ensure you're running the latest, most secure version of your browser. It's always best to stay one step ahead! You've got this! Stay secure and keep the internet safe by following these steps! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00409 · 34.0th percentile
Published
2026-01-20T04:14Z
EPSS history
Timeline
  • 20 JAN 04:14Z
    Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML…
    cvelistv5