VulnerabilityPublished 25 Jun 2026

Chrome 149 Update Resolves 18 Severe Vulnerabilities

Source SecurityWeek

Fixed in 149.0.7827.196 : patch affected systems soon.

Data as of 26 Jun 2026, 02:22 UTC

Severity

High

Rated High by Threat Radar from the SecurityWeek text

Patch: Available – fixed in 149.0.7827.196

remote

What to do

AI-suggested

Users and administrators should update to Chrome version 149.0.7827.196/197 (Windows/macOS) or 149.0.7827.196 (Linux) to apply the official fixes for these vulnerabilities. No additional mitigation steps are indicated by the vendor.

Description

More than half of the bugs are use-after-free defects, which can potentially lead to remote code execution. The post Chrome 149 Update Resolves 18 Severe Vulnerabilities appeared first on SecurityWeek .

Impact

Successful exploitation of the use-after-free vulnerabilities could allow an attacker to execute arbitrary code remotely, potentially escaping the browser sandbox and compromising the host system. Other flaws fixed could lead to information disclosure or denial of service. However, there are no reports of these vulnerabilities being exploited in the wild at this time.

Summary

The Chrome 149 update fixes 18 security vulnerabilities, with a majority being use-after-free defects that can lead to remote code execution. These memory corruption bugs could be exploited to escape the browser sandbox when combined with other system vulnerabilities. Additional fixes address out-of-bounds reads, improper implementations, uninitialized uses, and input validation errors. The vulnerabilities were primarily discovered by Google, with the most severe reported by an anonymous researcher. No active exploitation has been observed. The update is rolling out as Chrome 149.0.7827.196/197 for Windows and macOS, and 149.0.7827.196 for Linux.

References

securityweek.com/chrome-149-update-resolves-18-severe-vulnerabilities/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 25 Jun 2026, 08:16 UTC

References

Community reviews

Related threats