Google has officially rolled out the stable version of Chrome 144, bringing an important round of security updates to users across major platforms. The new release—version 144.0.7559.59 on Linux and 144.0.7559.59/60 on Windows and macOS—started reaching users between January 13 and January 14, 2026. As usual, the update is being distributed gradually, but it is now widely available for most users on Windows, macOS, and Linux.
Although Chrome 144 includes a handful of developer-focused improvements and minor feature tweaks—such as enhancements to CSS handling and improvements to the find-in-page experience—the real focus of this release is security. This update addresses several browser vulnerabilities, making it one of those releases where installing the update as soon as possible truly matters.
Security Fixes and Vulnerabilities Addressed
In total, Chrome 144 fixes 10 security vulnerabilities, including multiple high-severity flaws. A significant number of these issues are tied to the V8 JavaScript engine, which is responsible for executing JavaScript code inside the browser. Because JavaScript is used heavily across modern websites, vulnerabilities in V8 can be especially dangerous if left unpatched.
Among the most notable fixes is CVE-2026-0899, a high-severity out-of-bounds memory access bug in V8. Issues like this can potentially allow attackers to read or manipulate memory outside of intended limits, opening the door to crashes, data leaks, or even arbitrary code execution under the right conditions.
Another high-severity vulnerability, CVE-2026-0900, involves an inappropriate implementation flaw in V8. While less dramatic sounding than memory corruption, logic flaws can still be exploited to bypass browser safeguards or trigger unexpected behavior. Similarly, CVE-2026-0901 affects Blink, Chrome’s rendering engine, and is also rated high severity due to the potential impact if exploited.
Chrome 144 also patches CVE-2026-0902, a medium-severity logic issue in V8. In addition to these headline vulnerabilities, Google fixed several other medium- and low-severity issues affecting various parts of the browser. These include components related to downloads, digital credentials, network policy enforcement, and parts of the user interface.
While Google has not disclosed detailed technical exploit information—standard practice to prevent abuse—some of the high-severity flaws could theoretically be exploited if a user were tricked into visiting a specially crafted or malicious webpage. That risk is exactly why Google strongly encourages users to keep Chrome up to date and apply security patches promptly.
Bug Bounties and Researcher Credits
As with many Chrome security releases, Google credited external security researchers for responsibly reporting many of the vulnerabilities fixed in version 144. These contributors were rewarded through Google’s bug bounty program, which continues to play a key role in identifying and fixing browser security flaws before they can be exploited in the wild.
What You Should Do Now
If you haven’t already updated, the most important step is simple: update Chrome immediately. In most cases, Chrome updates automatically in the background. However, you can manually check by opening Chrome, navigating to Settings, selecting About Chrome, and letting the browser check for updates.
After the update installs, make sure to restart your browser. Many security fixes don’t fully take effect until Chrome is restarted, so this step is essential.
Finally, keep automatic updates enabled. Staying on the latest version of Chrome is one of the easiest and most effective ways to protect yourself from newly discovered security threats. Chrome 144 is a reminder that even routine updates can contain critical fixes that help keep your browsing safe.
