CVE-2026-2319
HIGHGoogle Chrome <145.0.7632.45 - RCE
Title source: llmDescription
Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures and install a malicious extension to potentially exploit object corruption via a malicious file. (Chromium security severity: Medium)
Scores
CVSS v3
7.5
EPSS
0.0003
EPSS Percentile
6.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Classification
CWE
CWE-362
Status
published
Affected Products (1)
google/chrome
< 145.0.7632.45
Timeline
Published
Feb 11, 2026
Tracked Since
Feb 18, 2026