Chrome Security Update Patches Three High-Severity Browser Flaws

TL;DR

Google shipped a Chrome security update on June 10, 2026. The release moves the Stable channel to 149.0.7827.200/201 for Windows and Mac, and 149.0.7827.200 for Linux. It fixes three high-severity flaws in Mojo, Payments, and AdFilter.

Why this Chrome security update matters

Chrome runs on billions of devices worldwide. Each flaw here could let an attacker corrupt memory inside the browser. As a result, a crafted web page might trigger a crash or run unwanted code. Therefore, patching early shrinks your exposure window.

How the flaws work

Google credits its own researchers for all three reports. CVE-2026-13281 is an integer overflow in Mojo, Chrome’s inter-process messaging layer. CVE-2026-13282 is a use-after-free bug in the Payments component. CVE-2026-13283 is another use-after-free flaw, this time in AdFilter.

Use-after-free and overflow bugs share one trait. Both let attackers tamper with memory the browser still trusts.

Affected versions

Any Chrome build before 149.0.7827.200 stays vulnerable on Linux. On Windows and Mac, builds before 149.0.7827.200/201 remain at risk. Chromium-based browsers like Edge, Brave, and Opera usually inherit these fixes a little later.

Exploitation status

Google has not reported active exploitation for these three flaws. Likewise, no public proof-of-concept exists yet. Still, Google often limits bug details until most users update.

How to patch

Open Chrome, then go to Settings > Help > About Google Chrome. The browser checks for updates and downloads them automatically. After that, relaunch Chrome to apply the fix.

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee PayPal

Crypto

USDT (TRC20):

TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm Copy

USDT (ERC20):

0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce Copy

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.