Security update for chromium
Description
A security update for Chromium addresses multiple vulnerabilities including use-after-free, privilege elevation, incorrect authorization, race condition, buffer overflow, and improper resource control. These issues affect Chromium versions prior to 151.0.7922.173. The vulnerabilities have been assigned CVE identifiers CVE-2026-76017 through CVE-2026-76023. The update fixes these issues to improve the security of the Chromium browser on affected platforms.
Affected software
pkg:github/chromium/chromiumRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This update for Chromium version 151.0.7922.173 fixes several security vulnerabilities: CVE-2026-76017 (use after free in Chromoting), CVE-2026-76018 (privilege elevation in Import), CVE-2026-76019 (incorrect authorization in Workers), CVE-2026-76020 (race condition in V8), CVE-2026-76021 (use after free in DOM), CVE-2026-76022 (buffer overflow in Network), and CVE-2026-76023 (improper resource control in Linux Toolkit Theming). These vulnerabilities could allow attackers to execute unauthorized actions or cause memory corruption. The update addresses these issues by patching the affected components in Chromium.
Potential Impact
The vulnerabilities fixed in this update could lead to use-after-free conditions, privilege escalation, incorrect authorization checks, race conditions, buffer overflows, and improper resource control. These issues may allow attackers to execute arbitrary code, elevate privileges, or bypass security controls within the Chromium browser. The overall impact is high due to the potential for serious security breaches if exploited.
Mitigation Recommendations
Apply the security update to upgrade Chromium to version 151.0.7922.173 or later. This update contains official fixes for the listed vulnerabilities. No additional mitigation steps are indicated beyond applying the update.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-jpjq-vq2m-mhq6
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-76017"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a89a6dfacd9273b49151eea
Added to database: 08/22/2026, 13:40:47 UTC
Last enriched: 09/17/2026, 03:17:41 UTC
Last updated: 10/06/2026, 18:48:25 UTC
Views: 82
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.