You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
chrome 147 update
About this tag
The chrome 147 update tag covers security fixes in Google Chrome version 147, with a focus on vulnerabilities affecting Windows endpoints. Key issues include CVE-2026-7350, a high-severity use-after-free bug in WebMIDI that could enable sandbox escape after renderer compromise, and CVE-2026-6306, a heap buffer overflow in PDFium that allows remote code execution via crafted PDF files. These flaws are also relevant to Microsoft Edge, which inherits Chromium fixes. Discussions emphasize the importance of patching promptly to mitigate risks to enterprise fleets and individual users.
On April 28, 2026, Google shipped Chrome 147.0.7727.137/138 for desktop to fix 30 security flaws, including CVE-2026-7350, a high-severity use-after-free bug in WebMIDI that could help an attacker escape Chrome’s sandbox after compromising the renderer process. The line that matters for...
Chromium’s CVE-2026-6306 is exactly the kind of browser vulnerability that looks narrow at first glance but carries broad real-world risk: a heap buffer overflow in PDFium affecting Google Chrome prior to 147.0.7727.101. Google’s April 15, 2026 stable update says the flaw was fixed in Chrome...