CVE-2026-0905

Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain…

Critical · published January 20, 2026

CVSS v3.1
9.8
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

🚨 A sneaky flaw in Google Chrome could expose sensitive information from your network logs! 🔥 Think of it like a nosy neighbor peeking into your mailbox, rifling through the contents without you even knowing. If they get a hold of your network log files, they might uncover private conversations and secrets that should stay hidden. This vulnerability could allow an attacker to access potentially sensitive data from the network log file, leading to serious privacy breaches. If exploited, it could compromise user credentials, sensitive communications, and much more, making it a critical issue that demands immediate attention!

Put simply

Think of it like a nosy neighbor peeking into your mailbox, rifling through the contents without you even knowing. If they get a hold of your network log files, they might uncover private conversations and secrets that should stay hidden. The issue arises from insufficient policy enforcement in Google Chrome versions prior to 144.0.7559.59, allowing unauthorized access to sensitive information in network log files. This means that if an attacker can obtain these log files, they can exploit the information contained within them.

What to do

This vulnerability could allow an attacker to access potentially sensitive data from the network log file, leading to serious privacy breaches. If exploited, it could compromise user credentials, sensitive communications, and much more, making it a critical issue that demands immediate attention! Update Google Chrome to version 144.0.7559.59 or later immediately to patch this vulnerability. Additionally, regularly audit your network log policies to ensure that sensitive information is adequately protected going forward. You've got this! Stay vigilant, apply the latest updates, and keep your data safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00248 · 15.2th percentile
Published
2026-01-20T04:14Z
EPSS history
Timeline
  • 20 JAN 04:14Z
    Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain…
    cvelistv5