Google Chrome fixes 151 flaws, including 22 critical remote code execution bugs

Google has released a major Chrome Stable update that patches 151 security vulnerabilities, including 22 critical flaws affecting desktop builds on Windows, macOS, and Linux, with related fixes also noted for Android and iOS. The patched desktop versions are 148.0.7778.216/217 for Windows, 148.0.7778.215/216 for macOS, and 148.0.7778.215 for Linux. Google and national cyber authorities urged users and administrators to update immediately, while the company temporarily withheld detailed technical information until most users receive the fixes. Google said none of the newly disclosed critical issues were known to be exploited in the wild at disclosure time.

The most serious bugs include CVE-2026-9872 in the GPU process, CVE-2026-9873 in Network, CVE-2026-9874 in Dawn, and CVE-2026-9875 in WebGL, alongside numerous flaws in ANGLE, Bluetooth, Base, Proxy, media, and other browser components. The vulnerabilities span use-after-free, out-of-bounds read and write, integer overflow, race condition, and insufficient validation weaknesses that could enable remote code execution, sandbox escape, data corruption, or broader system compromise through malicious web content. Google said many issues were found internally through fuzzing, sanitizers, and control-flow integrity tooling, while external researchers also reported multiple bugs through the bounty program, with rewards reaching $43,000.