Google Chromium Remote Code Execution Vulnerability (CVE-2026-2441)

A remote code execution vulnerability (CVE-2026-2441) was identified recently and impacting Google Chrome and Chromium-based browsers.  A remote attacker could exploit this vulnerability to execute arbitrary code inside a sandbox via a crafted HTML page and trigger remote code execution on the targeted system.  The vulnerability is actively exploited in the wild, users are urged to update their browsers to the latest version immediately to mitigate any potential threats.

Vulnerability

• Remote Code Execution Vulnerability (CVE-2026-2441)

Severity Level

• High

Affected versions

• Google Chrome prior to 144.0.7559.75 (Linux)
• Google Chrome prior to 145.0.7632.75/76 (Mac)
• Google Chrome prior to 145.0.7632.75/76 (Windows)
• Microsoft Edge prior to 145.0.3800.58

Remediation

• Update the Google Chrome and Chromium-based browsers to the latest version IMMEDIATELY.

Reference

• Chrome Releases: Stable Channel Update for Desktop (Google)
• CVE-2026-2441 – Security Update Guide – Microsoft
• Known Exploited Vulnerabilities Catalog | CISA
• NVD – CVE-2026-2441 (NIST)
• Google Chrome Remote Code Execution Vulnerability (HKCERT)
• Microsoft Edge Multiple Vulnerabilities (HKCERT)

Published on: 20 Feb 2026