Google Chrome Security Update: Multiple UAF/Integer Overflow Vulnerabilities Fixed

Vulnerability Overview Google Chrome released a stable update that fixes multiple security vulnerabilities. These include use-after-free, integer overflow, out-of-bounds read/write, use of uninitialized memory, and insufficient data validation. Some vulnerabilities are marked as "Critical," while others are rated as "High" or "Medium." Scope of Impact Operating Systems: Windows, macOS, and Linux. Versions: 149.0.7827.102/103 (Windows and macOS), 149.0.7827.102 (Linux). Vulnerability Types: - Use-after-free - Integer overflow - Out-of-bounds read and write - Use of uninitialized memory - Insufficient data validation - Other security issues Remediation Update Chrome: Users should update to the latest version of Chrome as soon as possible to fix these vulnerabilities. Security Researchers: Thanks to all security researchers who helped prevent security vulnerabilities during the development cycle. Automated Detection Tools: Many vulnerabilities were automatically detected via AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL. Vulnerability Details Below are details for some of the key vulnerabilities: CVE-2026-11628: Use-after-free in Ozone. Reporter: Google. CVE-2026-11629: Use-after-free in Ozone. Reporter: Google. CVE-2026-11630: Use-after-free in File Input. Reporter: Google. CVE-2026-11631: Use-after-free in Aura. Reporter: Google. CVE-2026-11632: Use-after-free in TabStrip. Reporter: Google. CVE-2026-11633: Use-after-free in Compositing. Reporter: Google. CVE-2026-11634: Use-after-free in Gamepad. Reporter: Google. CVE-2026-11635: Use-after-free in Bluetooth. Reporter: Google. CVE-2026-11636: Use-after-free in Autofill. Reporter: Google. CVE-2026-11637: Use-after-free in Views. Reporter: Google. CVE-2026-11638: Use-after-free in Printing. Reporter: Google. CVE-2026-11639: Use-after-free in Network. Reporter: Google. CVE-2026-11640: Integer overflow in libyuv. Reporter: Google. CVE-2026-11641: Use-after-free in Bluetooth. Reporter: Google. CVE-2026-11642: Use-after-free in Web Apps. Reporter: Google. CVE-2026-11643: Use-after-free in Proxy. Reporter: Google. CVE-2026-11644: Use-after-free in Views. Reporter: Google. CVE-2026-11645: Out-of-bounds memory access in V8. Reporter: 303fo6o3. CVE-2026-11646: Use-after-free in ViewTransitions. Reporter: Quac Tran. CVE-2026-11647: Use-after-free in Printing. Reporter: Google. CVE-2026-11648: Use-after-free in FullScreen. Reporter: Mihnea Nicolau. CVE-2026-11649: Use-after-free in V8. Reporter: Google. CVE-2026-11650: Use-after-free in V8. Reporter: Google. CVE-2026-11651: Use-after-free in Network. Reporter: Google. CVE-2026-11652: Use-after-free in Extensions. Reporter: Google. CVE-2026-11653: Insufficient data validation of untrusted input in Extensions. Reporter: Google. CVE-2026-11654: Use-after-free in CameraCapture. Reporter: Google. CVE-2026-11655: Integer overflow in Media. Reporter: Google. CVE-2026-11656: Use-after-free in ServiceWorker. Reporter: Google. CVE-2026-11657: Use-after-free in Payments. Reporter: Google. CVE-2026-11658: Insufficient data validation of untrusted input in Extensions. Reporter: Google. CVE-2026-11659: Insufficient data validation of untrusted input in UI. Reporter: Google. CVE-2026-11660: Insufficient data validation of untrusted input in New Tab Page. Reporter: Google. CVE-2026-11661: Use-after-free in Views. Reporter: Google. CVE-2026-11662: Type confusion in Bindings. Reporter: Google. CVE-2026-11663: Use-after-free in Skia. Reporter: Google. CVE-2026-11664: Use-after-free in Payments. Reporter: Google. CVE-2026-11665: Out-of-bounds read in Dawn. Reporter: Google. CVE-2026-11666: Insufficient data validation of untrusted input in Input. Reporter: Google. CVE-2026-11667: Out-of-bounds read in WebRTC. Reporter: Google. CVE-2026-11668: Use of uninitialized memory in Codecs. Reporter: Google. CVE-2026-11669: Integer overflow in Media. Reporter: Google. CVE-2026-11670: Use-after-free in PDF. Reporter: Google. CVE-2026-11671: Use-after-free in Navigation. Reporter: Google. CVE-2026-11672: Out-of-bounds write in GPU. Reporter: Google. CVE-2026-11673: Use-after-free in InterestGroups. Reporter: Google. CVE-2026-11674: Use-after-free in Guest View. Reporter: Google. CVE-2026-11675: Insufficient data validation of untrusted input in Skia. Reporter: Google. CVE-2026-11676: Insufficient data validation of untrusted input in Dawn. Reporter: Google. CVE-2026-11677: Race condition in Network. Reporter: Google. CVE-2026-11678: Integer overflow in libyuv. Reporter: Google. CVE-2026-11679: Use-after-free in Codecs. Reporter: Google. CVE-2026-11680: Use-after-free in Media. Reporter: Google. CVE-2026-11681: Use-after-free in Ozone. Reporter: Google. CVE-2026-11682: Insufficient data validation of untrusted input in Views. Reporter: Google. CVE-2026-11683: Use-after-free in WebCodecs. Reporter: Google. CVE-2026-11684: Insufficient policy enforcement in Network. Reporter: Google. CVE-2026-1168

Goal Reached Thanks to every supporter — we hit 100%!

Google Chrome Security Update: Multiple UAF/Integer Overflow Vulnerabilities Fixed

More from this source