TL;DR
Google shipped a Chrome security update on July 21, 2026. It fixes 12 vulnerabilities, and Google rates every one of them High. The release lands as 150.0.7871.181/.182 for Windows and Mac, and 150.0.7871.181 for Linux.
Why it matters
Chrome holds roughly 65 percent of the browser market, by public tracking estimates. So a browser bug reaches an enormous audience. Notably, this batch contains no Critical-rated flaws. Google reserves that top tier for bugs that escape the sandbox. Even so, High-severity browser bugs remain worth patching fast. Attackers often chain them with other issues.
How the attacks work
Most of these bugs are memory-safety issues. The set includes type confusion, out-of-bounds writes, and use-after-free flaws. Others cover integer overflow and uninitialized memory use. Bugs in this class can corrupt memory when a browser parses hostile content. In practice, that usually means visiting a malicious web page.
The affected components span the browser. Two flaws sit in WebAudio, and two more in ANGLE, Chrome’s graphics translation layer. Others touch V8, Skia, Extensions, Chromecast, Certificate handling, the GPU process, and the UI. Google withholds technical detail until most users update. This report shares no exploit code.
The CVE list
Google assigned CVE-2026-16413 through CVE-2026-16424 to this batch. Google’s own researchers reported ten of them. The AI-driven tool XBOW found the two WebAudio bugs, CVE-2026-16420 and CVE-2026-16421, each earning a $500 reward.
Affected versions and patch
Any Chrome build before 150.0.7871.181 needs the fix. Chromium-based browsers like Edge, Brave, and Opera usually follow within days. First, open Chrome’s About page to trigger the update. Then restart the browser, since the patch only applies after a relaunch. Google’s stable channel update post lists every fix. Google reports no in-the-wild exploitation and no public proof-of-concept for these flaws. Still, applying this Chrome security update promptly is the safe move.
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.