← Back

CVE-2026-0905

nvd nist
Published: Jan 20, 2026Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain potentially sensitive information via a network log file. (Chromium security severity: Medium)

Affected (2)

Products: Google: Chrome
Google
1 product
Chrome
Configuration A
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Chrome
Before 144.0.7559.59
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Chrome
Before 144.0.7559.60
Running on/withPlatform Versions
Apple
Macos
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: chrome-cve-admin@google.com
Release NotesVendor Advisory
Source: chrome-cve-admin@google.com
Issue TrackingPermissions Required

Timeline

No history available yet.