chrome 150

Google’s June 30, 2026 Chrome 150 desktop update fixed CVE-2026-14010, a medium-severity Windows-only information disclosure flaw in Chrome’s Codecs component that affected versions before 150.0.7871.47 and could expose process memory through a crafted HTML page. The bug is not a browser...

Google fixed CVE-2026-14073, a low-severity WebXR navigation-restriction bypass in Chrome, in the June 30, 2026 Chrome 150 stable desktop release for Windows, macOS, and Linux, with NVD publishing the entry the same day and modifying it on July 1. The bug is not the kind of headline-grabbing...

On June 30, 2026, Google shipped Chrome 150 to the stable channel for Windows, macOS, and Linux, fixing CVE-2026-14107, a use-after-free flaw in Chromium’s Scheduling component that could let a remote attacker run code inside Chrome’s sandbox through a crafted HTML page. The vulnerability is...

Google fixed CVE-2026-14038 in Chrome 150.0.7871.47 for Windows and Mac on June 30, 2026, addressing a low-severity New Tab Page input-validation flaw that could help an attacker escape Chrome’s sandbox after already compromising the renderer process with a crafted HTML page. The oddity is not...

Google Chrome before 150.0.7871.47 contains CVE-2026-14041, a low-severity Chromium Serial component flaw disclosed on June 30, 2026, in which insufficient policy enforcement could let a remote attacker escalate privileges through a crafted HTML page if user interaction occurs. The vulnerability...

Google fixed CVE-2026-14052 in Chrome 150.0.7871.47 for Windows and Mac on June 30, 2026, closing a low-severity FileSystem policy-enforcement flaw that could let a remote attacker bypass discretionary access controls through a crafted HTML page. The bug is not the sort of browser vulnerability...

Google patched CVE-2026-14112 in Chrome 150.0.7871.47 for Windows and macOS on June 30, 2026, after documenting an Enterprise-component information disclosure bug that could expose sensitive process-memory data through a crafted HTML page and user interaction. The National Vulnerability Database...

Google fixed CVE-2026-14151 in Chrome 150.0.7871.47 for Windows and Mac on June 30, 2026, after documenting a low-severity “inappropriate implementation in AI” flaw that could let an attacker who already controlled the renderer potentially escape the browser sandbox through crafted HTML. The...

Google fixed CVE-2026-13973 in Chrome 150.0.7871.47 for Windows and Mac on June 30, 2026, after documenting a medium-severity UI implementation flaw that could let a crafted web page spoof browser interface elements if a user performed specific gestures. The bug is not the kind of...

Google patched CVE-2026-14016 in Chrome 150.0.7871.47 for Windows and Mac after disclosing that a medium-severity SVG policy-enforcement flaw could let a remote attacker leak cross-origin data through a crafted HTML page in vulnerable desktop builds. The bug is not a headline-grabbing zero-day...

CVE-2026-13875 is a medium-severity Google Chrome vulnerability fixed in Chrome 150.0.7871.47 for Windows on June 30, 2026, involving insufficient validation of untrusted input in the GPU component that could expose process memory after a renderer compromise via a crafted HTML page. That...

Google fixed CVE-2026-13858, a medium-severity out-of-bounds read in Chrome’s FFmpeg media component, in the June 30, 2026 Chrome 150 stable desktop release for Windows, Mac, and Linux, with vulnerable builds listed as earlier than 150.0.7871.47. The bug is not the scariest item in Chrome 150’s...

Google fixed CVE-2026-13814 in Chrome 150.0.7871.47 for Windows and Mac on June 30, 2026, after documenting a high-severity use-after-free flaw in Chrome’s Views interface framework that could let a remote attacker trigger heap corruption through crafted HTML and specific user gestures. The bug...

Google published Chrome 150 to the stable channel on June 30, 2026, including a fix for CVE-2026-13784, a critical use-after-free flaw in Chrome’s Views UI framework affecting versions before 150.0.7871.47. The vulnerability is not just another line item in a very large browser security release...

Google fixed CVE-2026-13781 in Chrome 150.0.7871.47 for Windows and Mac on June 30, 2026, after classifying the Skia input-validation flaw as a critical sandbox-escape risk for attackers who had already compromised Chrome’s renderer process. The important phrase is not merely “crafted HTML...

Google published Chrome 150.0.7871.46/.47 for Windows and macOS on June 30, 2026, fixing CVE-2026-13933, a medium-severity Passwords component flaw that could expose sensitive process-memory information after a renderer compromise. The National Vulnerability Database later tied the issue to...