CVE-2026-3539 - Vulnerability Analysis

Overview

Google Chrome < 145.0.7632.159 contains an object lifecycle issue in DevTools caused by improper handling of extension objects, letting attackers exploit heap corruption via crafted malicious extensions, exploit requires user to install malicious extension.

Severity & Score

Impact

Attackers can exploit heap corruption via malicious extensions, potentially leading to arbitrary code execution or browser compromise.

Mitigation

Update to version 145.0.7632.159 or later.

References

• https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html
• https://issues.chromium.org/issues/483853098

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 4, 2026

🟠 CVE-2026-3539 - High (8.8) Object lifecycle issue in DevTools in Google Chrome prior to 145.0.7632.159 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severit... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3539/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner