InfoSecBulletin Cybersecurity for mankind
Google has released Chrome 144 for Windows, Mac, and Linux, fixing 10 security issues, mainly in the V8 JavaScript engine. The rollout is scheduled to reach users progressively over the coming days and weeks.
Critical Security Patches for V8 Engine:
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Chrome version 144.0.7559.59 for Linux and 144.0.7559.59/60 for Windows and Mac includes several security upgrades, fixing six of the ten vulnerabilities affecting the V8 JavaScript engine.
CVE-2026-0899 is a major vulnerability in the V8 engine involving out-of-bounds memory access. Google has released Chrome 144 for Windows, Mac, and Linux, fixing 10 security issues, mainly related to the V8 engine.
The rollout is scheduled to reach users progressively over the coming days and weeks.
CVE-2026-0899 is a serious out-of-bounds memory access vulnerability in the V8 engine. This high-risk issue could let attackers access memory beyond its limits, potentially causing data leaks or system breaches.
| CVE ID | Severity | Component | Vulnerability Type |
|---|---|---|---|
| CVE-2026-0899 | High | V8 | Out of bounds memory access |
| CVE-2026-0900 | High | V8 | Inappropriate implementation |
| CVE-2026-0901 | High | Blink | Inappropriate implementation |
| CVE-2026-0902 | Medium | V8 | Inappropriate implementation |
| CVE-2026-0903 | Medium | Downloads | Insufficient validation |
| CVE-2026-0904 | Medium | Digital Credentials | Incorrect security UI |
| CVE-2026-0905 | Medium | Network | Insufficient policy enforcement |
| CVE-2026-0906 | Low | Security UI | Incorrect security UI |
| CVE-2026-0907 | Low | Split View | Incorrect security UI |
| CVE-2026-0908 | Low | ANGLE | Use after free |
Additional V8 fixes include CVE-2026-0900 and CVE-2026-0902, which correct vulnerabilities that could be misused by attackers.
CVE-2026-0901 fixes a flaw in Blink, the engine that renders web content.
The update fixes security problems in the Digital Credentials and Split View features. Researcher Hafiizh was rewarded $1,500 for spotting these issues.
A medium-severity vulnerability (CVE-2026-0903) related to input validation in Downloads was fixed, along with network policy enforcement issues.
Google recognized external security researchers for identifying eight of the ten vulnerabilities and awarded over $18,500 in bug bounty rewards.
Users must update their Chrome browsers now for security improvements. Browsers usually update automatically, but users can manually check by going to Settings > About Chrome.
