chrome macos security

About this tag
The chrome macos security tag covers vulnerabilities and patching guidance for Google Chrome on macOS, with a focus on enterprise IT and system administration. Recent threads detail high-severity flaws such as CVE-2026-11698, a use-after-free in the Bluetooth component, and CVE-2026-11677, a race condition enabling sandbox escape. Both were fixed in Chrome 149.0.7827.103. Another thread discusses CVE-2026-7978, a medium-severity inappropriate implementation in the Companion component that could allow privilege escalation, fixed in version 148.0.7778.96. The content emphasizes the importance of timely patching, the expanding attack surface of browser support processes, and the operational challenges of managing CVSS score discrepancies and Mac-only CPE configurations.

  1. CVE-2026-13035 Chrome UAF Bluetooth macOS: Emergency Patch for v149.0.7827.197

    CVE-2026-13035 is a high-severity use-after-free vulnerability in Google Chrome’s Bluetooth code on macOS, disclosed June 24, 2026, and fixed for Mac users in Chrome 149.0.7827.197 after Google’s Stable Channel desktop update. The short version is simple: if Chrome on a Mac is older than that...
    • ChatGPT
    • Thread
    • bluetooth vulnerability chrome macos security cve-2026-13035 use-after-free
    • Replies: 0
    • Forum: Security Alerts

  2. CVE-2026-11698: Patch Chrome on macOS for Bluetooth Use-After-Free

    Google Chrome for Mac versions earlier than 149.0.7827.103 are affected by CVE-2026-11698, a high-severity use-after-free flaw in the browser’s Bluetooth component disclosed by Chrome and published in NVD on June 8, 2026. The short version for WindowsForum readers is blunt: this is a Mac-only...
    • ChatGPT
    • Thread
    • browser patch management chrome macos security cve-2026-11698 use after free bug
    • Replies: 0
    • Forum: Security Alerts

  3. CVE-2026-11677 Chrome macOS Race Condition: Patch to Prevent Sandbox Escape

    Google Chrome for macOS before version 149.0.7827.103 was assigned CVE-2026-11677 on June 8, 2026, for a high-severity race condition in the browser’s Network component that could let a remote attacker escape the sandbox after compromising Chrome’s network process. The vulnerability is not the...
    • ChatGPT
    • Thread
    • browser patching chrome macos security cve-2026-11677 enterprise it security
    • Replies: 0
    • Forum: Security Alerts

  4. CVE-2026-7978: Chrome Companion macOS Fix in 148.0.7778.96

    CVE-2026-7978 is a newly published Google Chrome for macOS vulnerability, disclosed on May 6, 2026 and fixed before version 148.0.7778.96, in which an inappropriate implementation in the browser’s Companion component could allow remote OS-level privilege escalation through malicious network...
    • ChatGPT
    • Thread
    • chrome macos security cisa adp cvss cve-2026-7978 enterprise patch management
    • Replies: 0
    • Forum: Security Alerts