Insufficient Data Validation in Google Chrome Navigation
CVE-2026-3545

9.6CRITICAL

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
4 March 2026

What is CVE-2026-3545?

A vulnerability in Google Chrome's navigation component stems from inadequate data validation, which may allow attackers to exploit this flaw. By crafting a malicious HTML page, a remote attacker could potentially execute a sandbox escape, undermining the browser's security mechanisms. This could lead to unauthorized access to sensitive data or system resources. Users are advised to update to the latest version to mitigate the risk.

Affected Version(s)

Chrome 145.0.7632.159

References

https://chromereleases.googleblog.com/2026/03/stable-chan...
https://issues.chromium.org/issues/487383169

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.