Update Chrome Now: Google Patches 3 Critical Flaws and 7 High-Risk Vulnerabilities

Google has released an urgent update for the Chrome Stable channel, addressing 10 security vulnerabilities, including three rated as “Critical” and seven rated as “High” severity. The update is rolling out for Windows, Mac, and Linux users and will be available to the global user base over the coming days and weeks.

The headline of this release is a trio of “Critical” vulnerabilities that could allow remote attackers to perform out-of-bounds memory access or heap corruption through specially crafted HTML pages.

• CVE-2026-3536: Integer Overflow in ANGLE – Reported by cinzinga, this vulnerability in the ANGLE graphics engine was awarded a $33,000 bounty.
• CVE-2026-3537: Object Lifecycle Issue in PowerVR – This critical flaw, discovered by Zhihua Yao of KunLun Lab, involves heap corruption that could be exploited via a malicious webpage. This researcher was awarded $32,000 for their discovery.
• CVE-2026-3538: Integer Overflow in Skia – A critical flaw in the Skia 2D graphics library that could lead to out-of-bounds memory access.

In addition to the critical flaws, seven “High-Severity” vulnerabilities were patched, targeting essential browser sub-components such as the V8 JavaScript engine, WebAssembly, and CSS.

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee PayPal

Crypto

USDT (TRC20):

TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm Copy

USDT (ERC20):

0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce Copy