widely-deployed-product-advisoryendpoint-software-vulnerability

Google Chrome Emergency Update Patches Multiple Critical Vulnerabilities

Patch & Detection Intelligence · 3 sources · Updated 4mo ago · First seen Mar 5, 2026

Google released an emergency update for Chrome for Desktop to Stable channel 145.0.7632.159/160 (Windows/macOS) and 145.0.7632.159 (Linux), addressing 10 security vulnerabilities, including three Critical issues. Reported flaws include CVE-2026-3536 (integer overflow in ANGLE), CVE-2026-3537 (object lifecycle issue in PowerVR), and CVE-2026-3538 (integer overflow in Skia); additional High-severity bugs span components such as V8, WebAssembly, CSS, DevTools, and media-related subsystems. Google limited detailed disclosure until patch adoption increases and urged users to update promptly; reported bug bounty awards for individual findings reached up to $33,000.

The Canadian Centre for Cyber Security echoed Google’s advisory, recommending organizations apply the Chrome updates when available to remediate the affected versions. Separate Canadian Centre advisories also covered unrelated patch guidance for Drupal contributed modules (including a critical access bypass in AJAX Dashboard and moderate issues such as XSS in other modules) and a Tenable Nessus Manager vulnerability fixed in versions 10.10.3 and 10.11.3; these items are distinct from the Chrome emergency update and should be tracked independently in vulnerability management workflows.

Patch this, or something else?See real exploitation activity before you spend the cycle.

Triage this advisory

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

3 events · Mar 3, 2026 – Mar 6, 2026

Mar 6, 20268mo ago
Debian releases DSA 6157-1 chromium security update
Debian published security advisory DSA 6157-1 for chromium, indicating a downstream security update in response to the Chrome/Chromium vulnerabilities. The notice was issued through the Debian security announce list.
Mar 4, 20268mo ago
Canadian Centre for Cyber Security issues Chrome update notice
The Canadian Centre for Cyber Security published advisory AV26-194, alerting users and administrators to Google's Chrome security update and recommending they review the vendor advisory and apply updates when available.
Mar 3, 20268mo ago
Google publishes Chrome Stable Channel security advisory
Google published a security advisory for Chrome for Desktop covering versions prior to 145.0.7632.159/160 on Windows and macOS and prior to 145.0.7632.159 on Linux. The advisory addressed 10 vulnerabilities, including three rated Critical, and Google said it had not observed active exploitation.

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Vulnerabilities

3 linked

PowerVR Object Lifecycle Vulnerability in Google Chrome for Android (CVE-2026-3537)Integer Overflow in Google Chrome ANGLE (CVE-2026-3536)Integer overflow in Google Chrome Skia (CVE-2026-3538)

Do you run this?See real exploitation activity behind this advisory so you can triage it against everything else in the queue.

Prioritize This Patch

Source coverage

Sources

3 references tracked. Mallory keeps watching after this page renders.

Debian Security AdvisoriesNews · Mar 6, 2026

[SECURITY] [DSA 6157-1] chromium security updateOpen source ↗

Cyber Security NewsNews · Mar 5, 2026

Google Releases Emergency Chrome Update to Fix 10 Security VulnerabilitiesOpen source ↗

Ca CcsNews · Mar 4, 2026

Google Chrome security advisory (AV26-194) - Canadian Centre for Cyber SecurityOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

Google Chrome Emergency Update Patches Multiple Critical Vulnerabilities

How this story unfolded

Debian releases DSA 6157-1 chromium security update

Canadian Centre for Cyber Security issues Chrome update notice

Google publishes Chrome Stable Channel security advisory

Related entities

Vulnerabilities

Sources

See the full picture, correlated to your attack surface.

Related stories

Google Chrome Stable Channel Update Fixes Three High-Severity Vulnerabilities

Google Chrome Stable Channel Update Fixes Multiple High-Severity Desktop Vulnerabilities

Google Chrome Zero-Day CVE-2026-2441 Exploited in the Wild

Google Chrome Emergency Update Patches Multiple Critical Vulnerabilities

How this story unfolded

Debian releases DSA 6157-1 chromium security update

Canadian Centre for Cyber Security issues Chrome update notice

Google publishes Chrome Stable Channel security advisory

Related entities

Vulnerabilities

Sources

See the full picture, correlated to your attack surface.

Related stories

Google Chrome Stable Channel Update Fixes Three High-Severity Vulnerabilities

Google Chrome Stable Channel Update Fixes Multiple High-Severity Desktop Vulnerabilities

Google Chrome Zero-Day CVE-2026-2441 Exploited in the Wild