CVE Catalog

CVE-2026-0905

Critical
Published: Translated: NVD NIST

Summary

Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain potentially sensitive information via a network log file. (Chromium security severity: Medium)

Risk Assessment

An attacker with access to a network log file may extract sensitive data, potentially compromising user privacy or system security.

Recommendation

Update Google Chrome to version 144.0.7559.59 or later and restrict access to network log files.

Original NVD description (English source)

Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain potentially sensitive information via a network log file. (Chromium security severity: Medium)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS