⚡ TL;DR | Go Straight to the Google Chrome 145 Vulnerability Audit Report
Last Friday, Google released security updates for Chrome 145 addressing a high-severity vulnerability that has already been exploited in zero-day attacks and could lead to arbitrary code execution. We have added a new report to Lansweeper to help you locate vulnerable Chrome installations.
Google Chrome 145 Vulnerability CVE-CVE-2026-2441
This latest update for Google Chrome fixes a high-severity vulnerability tracked as CVE-2026-2441 with a CVSS score of 8.8. It is described as a use-after-free vulnerability in CSS. When successfully exploited, it could allow malicious actors to execute arbitrary code leading to browser crashes, rendering issues, data corruption, and more.
Google’s advisory confirms that they are aware of an exploit existing in the wild, but as usual, they are not releasing any further details about the nature of any known exploits, to avoid further exploitation.
Update Vulnerable Chrome Installations
This issue has been fixed in the new update for Chrome 145, that is version 145.0.7632.75/76 for Windows or Mac, or 144.0.7559.75 for Linux. As always, Google is holding off on releasing further details until a majority of users has had a chance to update their installations. That way malicious actors won’t be able to leverage the additional information for further attacks.
Discover Vulnerable Chrome Installs
You can find vulnerable installation of Google Chrome through the Risk Insights in Lansweeper Sites or using the audit report in the report library. This way you have an actionable list of installations that haven’t been updated to the fixed version yet. You can get the report via the link below.
