Reported by 5 outlets

Timeline

1. original reporting

   Chrome 150 and Firefox 152 — Critical Vulnerabilities Patched

   securityweek.com · 91d ago · July 15th, 2026

   Google has released Chrome 150 and Mozilla has released Firefox 152, both patching critical vulnerabilities. Ensure browser updates are deployed across all endpoints.

   ---

2. mentioned by securityweek.com

   Chrome, Firefox Updates Patch Dozens of Vulnerabilities

   securityweek.com · 55d ago · August 19th, 2026

3. update from malware.news

   Chrome now: Two critical vulnerabilities fixed

   malware.news · 55d ago · August 19th, 2026

   Chrome is rolling out an update for its desktop versions. The update includes 15 security fixes, two of which address critical buffer overflow vulnerabilities. The stable channel has been updated to 151.0.7922.169/.170 for Windows and Mac, and 151.0.7922.169 for Linux. How to update Chrome If you don’t want to wait for the rollout to reach you, manually updating is easy. The easiest option is to allow Chrome to update automatically. But you can end up lagging behind on updates if you never close your browser or if something goes wrong, such as an extension preventing the update. To update manually, click the More menu (three dots), then go to Settings > About Chrome . If an update is available, Chrome will start downloading it automatically. Restart Chrome to complete the update, and you’ll be protected against these vulnerabilities. Chrome 151.0.7922.170 is up to date You can find an explanation of the version numbering system and step-by-step instructions in our guide: How to update Chrome on every operating system . Technical details As mentioned earlier, the two vulnerabilities rated critical in this update are both buffer overflow flaws. A buffer overflow is a type of software vulnerability that e

4. update from cyberpress.org

   Google Chrome Update Fixes 26 Security Flaws Including Two Critical Use-After-Free Bugs

   cyberpress.org · 41d ago · September 2nd, 2026

   Google has released a new Stable Channel update for Chrome desktop that patches 26 security vulnerabilities, including two critical-severity use-after-free flaws affecting Shared Tab Groups and WebGL. Users and enterprise administrators should apply the update promptly, particularly because the release addresses multiple memory-safety issues in browser components that process web content. Google Chrome Update Fixes 26 Security Flaws The most severe vulnerabilities are tracked as CVE-2026-84353 and CVE-2026-84352. CVE-2026-84353 is a critical use-after-free issue in Shared Tab Groups, while CVE-2026-84352 affects WebGL, Chrome’s interface for rendering interactive 2D and 3D graphics through the browser. Use-after-free vulnerabilities occur when software continues to access memory after it has been released. In browser attack chains, such memory-corruption bugs can potentially be leveraged to cause crashes, leak information, or execute attacker-controlled code, depending on exploitability and the effectiveness of Chrome’s layered mitigations. Eleven additional flaws received a high-severity rating. These include use-after-free bugs in Chrome’s Proxy, Browser, and Dawn components; an uninitialized resource issue in the V8 JavaScript engine ; and a GPU buffer overflow. Google also fixed authorization and input-validation flaws affecting FileSystem, the Omnibox

5. update from gbhackers.com

   Google Patches 26 Chrome Vulnerabilities, Including Critical WebGL and Shared Tab Groups Flaws

   gbhackers.com · 41d ago · September 2nd, 2026

   Google stated that the update will be rolled […] The post Google Patches 26 Chrome Vulnerabilities, Including Critical WebGL and Shared Tab Groups Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

6. update from securityweek.com

   Chrome and Firefox Updates Patch Dozens of Vulnerabilities

   securityweek.com · 41d ago · September 2nd, 2026

   The remaining 15 vulnerabilities are medium- and low-severity issues. Per Google’s advisory , only three of the flaws were reported by external researchers, but no bug bounty reward has been disclosed. The latest Chrome iteration is now rolling out as versions 152.0.7977.75/.76 for Windows and macOS, and as version 152.0.7977.75 for Linux. The flaws were addressed in Firefox’s GC, Navigation, Audio/Video, Security, WebGPU, Core & HTML, and Grid components, and in Firefox for Android. Three of the issued CVEs cover multiple bugs leading to memory corruption that could have been potentially exploited “with enough effort”. On Tuesday, Mozilla also announced the release of Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thun

7. update from malware.news

   Two critical Chrome flaws put users at risk on malicious websites

   malware.news · 41d ago · September 2nd, 2026

   A use-after-free vulnerability occurs when a program attempts to access a memory location after it has been fr

8. update from securityweek.com

   Chrome, Firefox Updates Patch 115 Vulnerabilities

   securityweek.com · 27d ago · September 16th, 2026

   The critical flaws include CVE-2026-91726, an out-of-bounds read in WebGL, and CVE-2026-91721 and CVE-2026-91749, use-after-free issues in Internals and Workers, respectively. Google also resolved multiple high-severity use-after-free, race condition, type confusion, integer overflow, incorrect authorization, and uninitialized resource weaknesses. Only two rewards totaling $2,500 were disclosed. Most of the addressed high-severity flaws are use-after-free and privilege escalation issues, but the browser update also resolves sandbox escape, site isolation, incorrect boundary condition, and mitigation bypass weaknesses. Unlike previous Mozilla advisories that collectively tracked memory safety issues identified internally under a single CVE, the fresh release mentions each individual bug, which explain