CVE-2026-0900

Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted…

High · published January 20, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
26.9
In the wild
Unconfirmed
What it is

⚡ A crafty HTML page is all it takes to slip past Chrome's defenses! This vulnerability in V8 could let remote attackers exploit object corruption like a magician pulling a rabbit out of a hat! 🎩 Think of the V8 engine as the kitchen of a busy restaurant. If a chef doesn't carefully inspect the ingredients (or in this case, the HTML content), they might accidentally allow a rotten tomato (malicious code) into the dish being served. It can ruin the whole meal for unsuspecting diners! If an attacker exploits this vulnerability, they could corrupt objects in the browser's memory, potentially leading to arbitrary code execution. This means they could access sensitive information, manipulate the browser, or even affect other processes running on the user's machine. It's a sneaky way for attackers to gain control, and nobody wants their computer turning against them!

Put simply

Think of the V8 engine as the kitchen of a busy restaurant. If a chef doesn't carefully inspect the ingredients (or in this case, the HTML content), they might accidentally allow a rotten tomato (malicious code) into the dish being served. It can ruin the whole meal for unsuspecting diners! This vulnerability stems from an inappropriate implementation in the V8 JavaScript engine of Google Chrome, allowing attackers to craft a malicious HTML page that corrupts objects in memory without the user's knowledge. The flaw exists in versions prior to 144.0.7559.59.

What to do

If an attacker exploits this vulnerability, they could corrupt objects in the browser's memory, potentially leading to arbitrary code execution. This means they could access sensitive information, manipulate the browser, or even affect other processes running on the user's machine. It's a sneaky way for attackers to gain control, and nobody wants their computer turning against them! Ensure you update Google Chrome to version 144.0.7559.59 or later to patch this vulnerability. Additionally, consider educating users about the risks of clicking on untrusted links and visiting suspicious websites. Keeping your browsing environment secure is crucial! You've got this! With a quick update, you can keep your browsing experience safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00346 · 26.9th percentile
Published
2026-01-20T04:14Z
EPSS history
Timeline
  • 20 JAN 04:14Z
    Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted…
    cvelistv5