VulnerabilityPublished 29 May 2026

Chrome 148 Update Patches 151 Vulnerabilities

Source SecurityWeek

Mentioned vulnerabilities

Severity

Critical

Rated by Threat Radar

Data as of 31 May 2026, 21:43 UTC

remote

What to do

AI-suggested

A security update for Chrome version 148.0.7778.215/216/217 has been released for Windows, macOS, and Linux. Users and organizations should apply this update promptly to remediate the critical and high-severity vulnerabilities. Since this is a client-side software update, manual patching is required. There are no indications that the vulnerabilities are already mitigated or that no action is needed. Patch status is confirmed as official-fix via the vendor's update release.

Description

The browser update resolves critical-severity security defects that could potentially lead to remote code execution. The post Chrome 148 Update Patches 151 Vulnerabilities appeared first on SecurityWeek .

Impact

The vulnerabilities patched in Chrome 148 include critical memory safety bugs that could enable remote code execution and sandbox escape, potentially allowing attackers to compromise the host system. The presence of multiple use-after-free and out-of-bounds issues increases the risk of exploitation. However, no active exploitation in the wild has been reported. The update mitigates risks associated with these critical flaws and reduces the attack surface of the browser.

Summary

Chrome 148 addresses 151 vulnerabilities, with 22 rated critical. Key critical bugs include CVE-2026-9872 (out-of-bounds write in GPU), CVE-2026-9873 (use-after-free in Network), CVE-2026-9874 (use-after-free in Dawn), CVE-2026-9875 (out-of-bounds read in WebGL), and CVE-2026-9876 (use-after-free in WebGL). Use-after-free vulnerabilities dominate the critical issues, posing risks of remote code execution and sandbox escape. The update also remediates 123 high-severity and 6 medium-severity issues, many related to insufficient input validation and memory safety. The vulnerabilities were discovered primarily by Google and external researchers, with bug bounty payouts exceeding $130,000. The update is rolling out across major desktop platforms.

References

securityweek.com/chrome-148-update-patches-151-vulnerabilities/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 29 May 2026, 10:18 UTC

References

Community reviews

Related threats