Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML …

CVE-2026-0902 affects Google Chrome versions prior to 144.0.7559.59, involving an inappropriate implementation in the V8 JavaScript engine. The vulnerability allows remote attackers to perform out of bounds memory reads through specially crafted HTML pages. This represents a medium severity security issue in Chrome's V8 engine that could potentially be exploited by malicious websites. The vulnerability has been addressed in Chrome version 144.0.7559.59 and later. Users should update their Chrome browsers to mitigate this security risk.