You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
chrome 147 security
About this tag
Chrome 147 security covers a series of high-severity vulnerabilities patched in Google Chrome version 147, including CVE-2026-6308 (out-of-bounds read in Media), CVE-2026-5861 (use-after-free in V8), and CVE-2026-5867 (heap buffer overflow in WebML). These memory-safety bugs could allow remote attackers to execute code or obtain sensitive information via crafted HTML pages and specific UI gestures. The fixes are included in Chrome 147.0.7727.101 and 147.0.7727.55. Because Microsoft Edge and other Chromium-based browsers inherit the same exposure, Windows users should apply these updates promptly. The tag also references Microsoft's Security Update Guide tracking these Chromium issues.
CVE-2026-6308 is another stark reminder that Chrome’s most dangerous bugs are often not flashy logic failures but low-level memory-safety issues hiding in the browser’s media stack. Google says an out-of-bounds read in Media affected Chrome versions before 147.0.7727.101, and that a remote...
Chromium’s CVE-2026-5861 is a reminder that even a mature browser engine can still be tripped up by classic memory-unsafe behavior at exactly the wrong layer. Microsoft’s Security Update Guide says the bug is a use-after-free in V8 affecting Google Chrome prior to 147.0.7727.55, and that a...
Chromium has landed another high-severity memory-safety bug in its WebML stack, and this one deserves attention because it sits in the browser’s highly exposed attack surface. According to the CVE record, CVE-2026-5867 is a heap buffer overflow in Google Chrome prior to 147.0.7727.55, and a...