CVE-2026-3543
HIGHCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
3Description
Inappropriate implementation in V8 in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
Analysis
Out-of-bounds memory access in Google Chrome's V8 engine (versions prior to 145.0.7632.159) enables remote attackers to achieve memory corruption through malicious HTML pages without requiring user privileges beyond standard interaction. The vulnerability affects all Chrome users and could potentially lead to information disclosure, data corruption, or code execution depending on memory layout and exploitation context.
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Notify all stakeholders of the vulnerability and patch availability; assess current Chrome versions in use across the organization. Within 7 days: Deploy Chrome version 145.0.7632.159 or later to all endpoints through your patch management system; prioritize systems in high-risk roles (finance, HR, executives). …
Sign in for detailed remediation steps.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today