Chrome 152 Update Patches 327 Security Vulnerabilities, including 10 Critical Flaws

TL;DR

Google shipped Chrome 152 to the stable channel on August 25, 2026. The Chrome 152 update fixes 327 security vulnerabilities, including 10 rated Critical. Most of the top flaws are use-after-free bugs, so update soon.

Notable CVEs

Why This Chrome 152 Update Matters

Chrome runs on billions of desktops worldwide. As a result, a browser flaw gives attackers a wide target. This Chrome 152 update lands one of the year’s largest single batches of fixes.

Google paid a $25,000 reward for the top bug. That figure signals real severity. Memory-safety flaws like these can let a malicious web page run code on your machine.

How the Attacks Work

Most Critical fixes address use-after-free bugs. These happen when code reuses memory that was already released. Consequently, an attacker can craft a page that corrupts memory and hijacks the process.

The flaws touch several browser parts. For example, CVE-2026-79282 sits in ANGLE, Chrome’s graphics layer. Others affect Aura, Views, Chromecast, and Safebrowsing. One Mobile bug, CVE-2026-78935, stems from an uninitialized variable.

Is It Being Exploited?

No exploitation in the wild has been confirmed. Google reports no active attacks tied to these bugs. Likewise, no public proof-of-concept exists yet. Still, Google restricts bug details until most users patch.

Affected Versions

Any Chrome build before 152 is affected. The fixed release is 152.0.7977.64 for Linux. Windows and Mac get 152.0.7977.64 or .65. The rollout reaches users over the coming days and weeks.

Patch and Mitigation Steps

Update Chrome right away. Open the menu, then choose Help and About Google Chrome. The browser checks for updates and installs them. Afterward, relaunch to apply the patch.

For the full list, read Google’s Chrome 152 stable channel update. Chromium-based browsers like Edge and Brave will ship the same fixes soon.

Support Our Threat Intelligence

Find our zero-day alerts and CVE reports helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee PayPal

Crypto

USDT (TRC20):

TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm Copy

USDT (ERC20):

0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce Copy

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.