CVE-2026-3545

Critical9.6Published on March 4, 2026

Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS score9.6 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness type (CWE)CWE-20

Vendorsapple, linux, microsoft, google

Affected products

Vendors	Product	Versions
google	chrome	< 145.0.7632.159
linux	linux kernel	-
microsoft	windows	-
apple	macos	-

Vulnerabilities

Over 1,800 patches in seven months: Google’s AI transforms Chrome security and finds a 13-year-old vulnerability

Google's Gemini-based AI fixed over 1,800 Chrome vulnerabilities in seven months, discovering a 13-year-old sandbox escape flaw and automating patches.

Aug 2, 202603:102 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Over 1,800 patches in seven months: Google’s AI transforms Chrome security and finds a 13-year-old vulnerability