Google has issued a high-severity alert after identifying 10 new security vulnerabilities in its Chrome browser, which is used by around 3 billion people worldwide. To address the threats, the company is rolling out the Chrome 144 update.
According to Google’s official statement, the vulnerability was discovered in Chrome version 143 and could potentially leave users’ applications exposed to attacks. Additionally, Google Chrome’s Srinivas Sista announced on January 13 that a total of ten vulnerabilities have been identified, ranging from high to low risk.
Sista said, "The Chrome team is delighted to announce the promotion of Chrome 144 to the stable channel for Windows, Mac, and Linux." Google announced that the update will be gradually released to all users, which may pose a major concern for individuals with sensitive data on their systems who cannot afford any risks.
Users can follow the steps below to download and install Google Chrome 144:
Step 1: Open the Google Chrome browser and access the Settings menu.
Step 2: Navigate to Help and then select About Google Chrome.
Step 3: Allow the Chrome 144 update to download and install automatically.
Step 4: Once the update is complete, restart Google Chrome to activate the changes. This will ensure your browser is protected against the identified security vulnerabilities.
-CVE-2026-0899 is a critical issue involving unauthorized memory access affecting the Chrome V8 JavaScript engine.
-CVE-2026-0900 is another critical vulnerability, this time due to improper implementation, once again affecting the V8 engine.
-CVE-2026-090 is the final high-severity vulnerability, involving another improper implementation, but this time impacting the Chromium Blink rendering component.
-CVE-2026-0902 is the medium-severity vulnerability, and it may seem familiar: improper execution in V8.
-CVE-2026-0903, is a moderately severe vulnerability in Downloads due to inadequate validation of untrusted input.
-CVE-2026-0904 is another medium issue, an incorrect security UI vulnerability in Digital Credentials.
-CVE-2026-0905 is the last of the mediums, an insufficient policy enforcement in Network.
-CVE-2026-0906 is the first of three low-severity vulnerabilities, an incorrect security UI.
-CVE-2026-0907 is an incorrect security UI in Split View, and CVE-2026-0908 is a use-after-free vulnerability in ANGLE.