Chrome Security Update: Fixes for UAF, OOB Write, and Integer Overflow (CVE-2026)

Vulnerability Overview Google Chrome stable updates to 151.0.7922.108/109 (Windows and Mac) and 151.0.7922.108 (Linux), containing multiple security fixes. These fixes address various vulnerability types, including use-after-free, out-of-bounds writes, inappropriate implementations, uninitialized uses, integer overflows, and others. Affected Versions Operating Systems: Windows, Mac, and Linux. Browser Versions: 151.0.7922.108/109 (Windows and Mac), 151.0.7922.108 (Linux). Vulnerability Types: - Use after free - Out of bounds write - Inappropriate implementation - Uninitialized Use - Integer overflow - Heap buffer overflow - Insufficient validation Remediation Security Fixes: A total of 41 security fixes are included. For specific details, refer to the Chrome Security Page. Reporting Sources: Multiple vulnerabilities were reported by anonymous reporters, Google internal teams, and external security researchers (including STAR Labs SG Pte. Ltd., XBOX, André Luksenberg, Viktoria Zhitnikova, OpenAI Codex Security, @beanSoup, heesun, Vu Van Tien, Seunghyun Lee, Wind39, Fabian Wahle, etc.). Fix Dates: The fixes cover issues reported between April 5, 2026, and July 29, 2026. Vulnerability Details CVE-2026-19137: Use-after-free in WebGL. CVE-2026-19149: Use-after-free in Aura. CVE-2026-19154: Use-after-free in Skia. CVE-2026-19157: Out-of-bounds write in ANGLE. CVE-2026-19170: Inappropriate implementation in WebGL. CVE-2026-19172: Use-after-free in Views. CVE-2026-19169: Insufficient validation in Contextual Tasks. CVE-2026-19168: Inappropriate implementation in V8. CVE-2026-19138: Heap buffer overflow in CrashReporting. CVE-2026-19139: Race condition in CredentialProvider. CVE-2026-19140: Use-after-free in GPU. CVE-2026-19141: Use-after-free in Resources. CVE-2026-19142: Use-after-free in Views. CVE-2026-19143: Insufficient validation in WebAPKs. CVE-2026-19144: Use-after-free in HTML. CVE-2026-19145: Use-after-free in Translate. CVE-2026-19146: Uninitialized Use in GPU. CVE-2026-19147: Use-after-free in Aura. CVE-2026-19148: Out-of-bounds write in GPU. CVE-2026-19150: Inappropriate implementation in V8. CVE-2026-19151: Use-after-free in V8. CVE-2026-19152: Inappropriate implementation in Navigation. CVE-2026-19153: Insufficient validation in Workers. CVE-2026-19155: Use-after-free in Payments. CVE-2026-19156: Heap buffer overflow in Base. CVE-2026-19158: Use-after-free in Media. CVE-2026-19159: Use-after-free in Views. CVE-2026-19160: Uninitialized Use in Skia. CVE-2026-19161: Uninitialized Use in Skia. CVE-2026-19162: Out-of-bounds write in V8. CVE-2026-19163: Use-after-free in Media. CVE-2026-19164: Insufficient validation in Codecs. CVE-2026-19165: Use-after-free in Extensions. CVE-2026-19166: Use-after-free in Web Authentication. CVE-2026-19167: Integer overflow in GPU. CVE-2026-19171: Use-after-free in Media. CVE-2026-19173: Out-of-bounds write in Skia. CVE-2026-19174: Integer overflow in V8. CVE-2026-19175: Use-after-free in Payments. CVE-2026-19176: Use-after-free in Skia. CVE-2026-19177: Insufficient validation in UI. Summary This update addresses multiple critical security vulnerabilities. Users are advised to update to the latest version as soon as possible to ensure security. For more details, visit the Chrome Security Page.

Goal Reached Thanks to every supporter — we hit 100%!

Chrome Security Update: Fixes for UAF, OOB Write, and Integer Overflow (CVE-2026)

More from this source