CVE-2026-0905
CRITICALGoogle Chrome < 144.0.7559.59 - Information Disclosure
Title source: ruleDescription
Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain potentially sensitive information via a network log file. (Chromium security severity: Medium)
Scores
CVSS v3
9.8
EPSS
0.0003
EPSS Percentile
8.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-200
Status
published
Affected Products (1)
google/chrome
< 144.0.7559.59
Timeline
Published
Jan 20, 2026
Tracked Since
Feb 18, 2026