HIGHCVSS: 8.8
Google Chrome V8 Race Condition Vulnerability Leading to Remote Code Execution
CVE-2026-1220
A vulnerability has been reported in Google Chrome that could allow a remote attacker to execute arbitrary code on the targeted system.
Published 20 January 2026Updated 25 January 2026Source: Google Chrome Releases
Description
Google Chrome is a popular internet browser that is used for accessing information available on the World Wide Web. It is designed for use on desktop computers such as Windows, macOS, and Linux.
A vulnerability exists in Google Chrome due to a race condition error in the V8 JavaScript engine. A remote attacker could exploit this vulnerability by persuading a victim to visit a specially crafted web page.
Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the targeted system, leading to system compromise or data theft.
Patch Information
References
Vulnerability Details
CVE ID:
CVE-2026-1220
Severity:
HIGH
CVSS Score:
8.8
Vendor:
Google
Product:
Google Chrome
Affected Versions:
Google Chrome versions prior to 144.0.7559.96 / 144.0.7559.97 for Windows and macOS & Google Chrome versions prior to 144.0.7559.96 for Linux
Published:
20 January 2026
Status Indicators
Exploited in Wild: No
Exploit Available: No
Patch Available: Yes
Tags
rcechromebrowserv8race-condition
Related Vulnerabilities
HIGH
Multiple High Severity Vulnerabilities in NGINX Could Lead to RCE and DoS
CVE-2026-27654
NGINX (F5) • 25 March 2026
HIGH
CVE-2026-3888: Ubuntu snapd Local Privilege Escalation via systemd-tmpfiles Timing Race
CVE-2026-3888
Canonical / Ubuntu • 17 March 2026
HIGH
Microsoft February 2026 Patch Tuesday - 59 CVEs, 6 Actively Exploited Zero-Days
CVE-2023-2804
Microsoft • 12 February 2026
HIGH
Multiple GitLab CE/EE Vulnerabilities in 18.x Versions
CVE-2025-9222
GitLab • 7 January 2026