Google Chrome Update Fixes 79 Flaws, Including 14 Critical Bugs

Google released a Stable Channel update for Chrome Desktop that fixes 79 vulnerabilities, including 14 critical flaws, in version 148.0.7778.167/168 for Windows and Mac and 148.0.7778.167 for Linux. The most severe issues include heap buffer overflows, integer overflows, use-after-free bugs, a race condition, and insufficient validation of untrusted input in components such as WebML, Skia, Blink, ANGLE, and Payments. Google said it is restricting technical details and proof-of-concept information until more users are patched, citing the risk that browser bugs can be weaponized for arbitrary code execution, sandbox escape, data theft, and host compromise.

Government and industry advisories urged organizations to update immediately, with the Canadian Centre for Cyber Security issuing notice AV26-458 for versions prior to 148.0.7778.167/168 on Windows and Mac and prior to 148.0.7778.167 on Linux. The latest release follows an earlier Chrome advisory, AV26-358, that covered versions prior to 147.0.7727.101/102, underscoring a continuing stream of browser security fixes. Google also disclosed bug bounty awards tied to the new patch set, including $43,000 for CVE-2026-8509 in WebML and $25,000 for CVE-2026-8510 in Skia.