Vulnerabilities
The browser refresh resolved critical and high-severity security defects, including a dozen use-after-free bugs.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Chrome"
Vulnerabilities
The vulnerability is tracked as CVE-2026-11645 and it was reported in late April by an anonymous researcher.
Vulnerabilities
Over 100 bugs are critical or high-severity, mainly use-after-free and insufficient validation of untrusted input flaws.
Vulnerabilities
The browser update resolves critical-severity security defects that could potentially lead to remote code execution.
Artificial Intelligence
More than 200 vulnerabilities patched in recent Chrome releases are marked as ‘reported by Google’.
Vulnerabilities
The refresh resolves critical-severity use-after-free and other types of bugs in various browser components.
Artificial Intelligence
Lax extension permissions and improper trust implementation allow attackers to inject prompts in the Claude Chrome extension.
Vulnerabilities
The fresh browser update resolves critical-severity integer overflow and use-after-free vulnerabilities.
Artificial Intelligence
The maximum reward for a zero-click Pixel Titan M exploit with persistence has increased to $1.5 million.
Vulnerabilities
The browser refreshes resolve critical and high-severity vulnerabilities that could lead to arbitrary code execution.
Vulnerabilities
The critical vulnerabilities affect Chrome’s WebML component and they have been reported by anonymous researchers.
Identity & Access
New Device Bound Session Credentials render stolen session cookies unusable by cryptographically binding authentication.
Vulnerabilities
Google has announced fixes for CVE-2026-5281, a zero-day affecting Chrome’s Dawn component.
Vulnerabilities
The software refresh fixes eight memory safety bugs affecting seven Chrome components.
Vulnerabilities
The flaws can be exploited to manipulate data and bypass security restrictions, potentially leading to code execution.
Endpoint Security
Starting September 2026, new Chrome iterations will be released twice as fast, part of a two-week cycle.
Artificial Intelligence
Malicious extensions could hijack the Gemini Live in Chrome feature to spy on users and steal their files.
Data Protection
The internet giant is developing an evolution of the certificates based on Merkle Tree Certificates (MTCs).
Vulnerabilities
A Chrome 145 update fixes CVE-2026-2441, a vulnerability that can likely be exploited for arbitrary code execution.
Malware & Threats
With more than 37 million combined downloads, the extensions expose users to tracking and personal information theft.
ICS/OT
The hackers published 5GB of data, including customer personal information and credentials for the RTKBase platform.
Incident Response
Vulnerabilities
Supply Chain Security
By default, npm install will no longer execute scripts from dependencies, unless explicitly allowed.
Artificial Intelligence
Management & Strategy
Artificial Intelligence
Vulnerabilities
Vulnerabilities
