Chrome 144 Released: 10 Security Fixes Patch Dangerous V8 Engine Flaws

Chrome 144 has been promoted to the stable channel, with Google stating the update addresses 10 vulnerabilities and includes three high-severity flaws that could affect the browser’s rendering and JavaScript engines. The release is versioned as 144.0.7559.59 for Linux and 144.0.7559.59/60 for Windows and Mac, and is being rolled out to users worldwide.

Among the fixes, CVE-2026-0899 in V8 is an out-of-bounds memory access flaw, with two other high-severity issues in V8 and Blink (CVE-2026-0900 and CVE-2026-0901) noted as inappropriate implementations, the latter credited to Irvan Kurniawan. Medium-severity issues include CVE-2026-0903, addressing insufficient validation of untrusted input in Downloads, which earned a $3,000 bounty for Azur, and CVE-2026-0902 in V8, with a $4,000 bounty.

Access to specific bug details remains restricted until most users have updated to prevent exploitation, and users are urged to verify their update status via Menu > Help > About Google Chrome. According to Google, the update is designed to mitigate risks by limiting reverse-engineering opportunities before patch adoption is widespread.