Google Releases Emergency Chrome Patch Addressing Three Major Security Flaws

Google has rolled out an emergency security update for its Chrome browser, addressing three high-severity vulnerabilities.

This update targets users on Windows, Mac, and Linux platforms, aiming to patch critical flaws that could compromise system security and user data.

The rapid deployment of these fixes highlights the ongoing challenges in securing widely used web browsers against sophisticated threats.

The update brings the stable channel to version 145.0.7632.116/117 for Windows and Mac, and 144.0.7559.116 for Linux users.

Google has stated that the rollout will occur over the coming days and weeks. Users are strongly advised to ensure their browsers are updated to the latest version to mitigate the risks associated with these vulnerabilities.

The swift action by Google underscores the importance of a proactive approach to vulnerability management in the face of persistent cyber threats.

Critical Vulnerabilities Patched

The security update addresses three specific vulnerabilities, all rated as high severity. The first flaw involves an out-of-bounds read error within Chrome’s Media component.

This type of vulnerability typically occurs when a program reads data past the end, or before the beginning, of the intended buffer.

Such flaws can lead to application crashes or potentially allow attackers to access sensitive information from adjacent memory locations, compromising data confidentiality.

The second vulnerability is a more complex out-of-bounds read and write issue located in Tint, a component used for shader translation.

Out-of-bounds write vulnerabilities are particularly dangerous as they can allow an attacker to corrupt memory.

This memory corruption can be leveraged to execute arbitrary code on the victim’s machine, potentially leading to full system compromise.

The combination of read and write capabilities in this flaw makes it a significant security concern that requires immediate remediation.

The final high-severity issue involves an inappropriate implementation within Chrome’s DevTools.

DevTools are powerful utilities built into the browser that allow developers to inspect and debug web pages.

An inappropriate implementation flaw in such a privileged component can have severe consequences.

Attackers might exploit this vulnerability to bypass security restrictions, access sensitive developer environments, or manipulate browser behavior in unintended ways, posing a significant risk to both developers and regular users.

CVE ID	Severity	Description	Component	Reporter
CVE-2026-3061	High	Out of bounds read	Media	Luke Francis
CVE-2026-3062	High	Out of bounds read and write	Tint	cinzinga
CVE-2026-3063	High	Inappropriate implementation	DevTools	M. Fauzan Wijaya (Gh05t666nero)

Google has a policy of keeping detailed bug information and links restricted until a majority of users have updated to the patched version.

This practice helps prevent threat actors from reverse-engineering the fixes and developing exploits before users can protect themselves.

The company also acknowledged the contributions of independent security researchers who discovered and reported these flaws, demonstrating the value of collaborative security efforts.

Users are encouraged to manually check for updates in their Chrome settings to ensure they are protected against these newly disclosed vulnerabilities.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.