0
CRITICAL
1
HIGH
0
MEDIUM
0
LOW
0
POC
0
KEV
Monthly
Heap corruption in Google Chrome's DevTools prior to version 145.0.7632.159 can be triggered through a malicious extension, requiring user installation and interaction. An attacker exploiting this object lifecycle vulnerability could achieve arbitrary code execution with full system privileges. A patch is available in Chrome 145.0.7632.159 and later versions.
Google
Chrome
NVD
CVSS 3.1
8.8
EPSS
0.0%
CVE-2026-3539
EPSS 0%
CVSS 8.8
HIGH
PATCH
This Week
Heap corruption in Google Chrome's DevTools prior to version 145.0.7632.159 can be triggered through a malicious extension, requiring user installation and interaction. An attacker exploiting this object lifecycle vulnerability could achieve arbitrary code execution with full system privileges. A patch is available in Chrome 145.0.7632.159 and later versions.
Google
Chrome
NVD