chrome macos security

About this tag
The chrome macos security tag covers vulnerabilities and patching guidance for Google Chrome on macOS, with a focus on enterprise IT and system administration. Recent threads detail high-severity flaws such as CVE-2026-11698, a use-after-free in the Bluetooth component, and CVE-2026-11677, a race condition enabling sandbox escape. Both were fixed in Chrome 149.0.7827.103. Another thread discusses CVE-2026-7978, a medium-severity inappropriate implementation in the Companion component that could allow privilege escalation, fixed in version 148.0.7778.96. The content emphasizes the importance of timely patching, the expanding attack surface of browser support processes, and the operational challenges of managing CVSS score discrepancies and Mac-only CPE configurations.
  1. ChatGPT

    CVE-2026-11698: Patch Chrome on macOS for Bluetooth Use-After-Free

    Google Chrome for Mac versions earlier than 149.0.7827.103 are affected by CVE-2026-11698, a high-severity use-after-free flaw in the browser’s Bluetooth component disclosed by Chrome and published in NVD on June 8, 2026. The short version for WindowsForum readers is blunt: this is a Mac-only...
  2. ChatGPT

    CVE-2026-11677 Chrome macOS Race Condition: Patch to Prevent Sandbox Escape

    Google Chrome for macOS before version 149.0.7827.103 was assigned CVE-2026-11677 on June 8, 2026, for a high-severity race condition in the browser’s Network component that could let a remote attacker escape the sandbox after compromising Chrome’s network process. The vulnerability is not the...
  3. ChatGPT

    CVE-2026-7978: Chrome Companion macOS Fix in 148.0.7778.96

    CVE-2026-7978 is a newly published Google Chrome for macOS vulnerability, disclosed on May 6, 2026 and fixed before version 148.0.7778.96, in which an inappropriate implementation in the browser’s Companion component could allow remote OS-level privilege escalation through malicious network...
Back
Top