InfoSecBulletin Cybersecurity for mankind
Google has launched a major security update for its Chrome browser. This update fixes 26 unique vulnerabilities that might let attackers run harmful code from a distance. The new Stable channel update brings versions 146.0.7680.153 and 146.0.7680.154 for Windows and macOS. Linux users will get version 146.0.7680.153.
This important update is meant to fix several serious memory problems that can harm both individual users and large networks. This report follows standard cybersecurity formats. It shows the biggest threats we dealt with in this release.
USA Bimbo Bakeries Confirms Data Stolen in Oracle EBS Zero-Day Attack
By infosecbulletin
/ Tuesday , September 8 2026
Bimbo Bakeries USA has confirmed that hackers stole employee data by exploiting a zero-day vulnerability in Oracle’s E-Business Suite (EBS). In...
Read More
ALERT
Roundcube Webmail fixes 12 security flaws, including zero-click XSS and SSRF bypass
By infosecbulletin
/ Monday , September 7 2026
Roundcube Webmail has given security updates for its 1.6 LTS and 1.7 branches. These updates fix 12 problems that could...
Read More
New HOOKEDGE Backdoor Deployed by Hackers in European Espionage
By infosecbulletin
/ Monday , September 7 2026
Russian-backed hacker group BlueDelta, also known as APT28, Fancy Bear, and Forest Blizzard, has used a small Windows backdoor called...
Read More
Hackers Exploiting MikroTik RouterOS Flaw Gaining Network Access
By infosecbulletin
/ Monday , September 7 2026
Attackers are misusing MikroTik routers through their Secure Shell (SSH) service, which can be accessed from the internet, to take...
Read More
CrowdStrike launches SafeMind, the first agentic cybersecurity solution for defenders
By infosecbulletin
/ Sunday , September 6 2026
CrowdStrike launched CrowdStrike SafeMind, a set of special security models and tools from the CrowdStrike Cyber Superintelligence Lab. The SafeMind...
Read More
Claude, DeepSeek, and Qwen AI agents combinedly used to hit gov.t across Asia
By infosecbulletin
/ Saturday , September 5 2026
Chinese-speaking hackers have added Claude, Qwen, and DeepSeek to their hacking system to automate cyberattacks on governments and other targets...
Read More
India: C-DOT Launches 14 Local Quantum-Safe Technologies
By infosecbulletin
/ Saturday , September 5 2026
India is making its communication systems safer and stronger by launching 14 local quantum products. These products were made by...
Read More
14,000 Dahua cameras compromised: TP-Link flaws enable RCE
By infosecbulletin
/ Saturday , September 5 2026
Over 14,000 Dahua security cameras connected to the internet have been hacked in a 35-day online attack that affected devices...
Read More
Microsoft Reveals Project Zenith Windows PCs Able to Run 30B+ AI Models Locally
By infosecbulletin
/ Saturday , September 5 2026
Microsoft has launched Project Zenith, a new Windows 11 experience for developers. It is made for powerful PCs that can...
Read More
Google issues warning of new Chrome zero-day flaw exploited
By infosecbulletin
/ Friday , September 4 2026
Google has updated the Chrome browser to fix a serious security issue in the V8 engine and 11 other flaws....
Read More
| CVE Identifier | Severity | Browser Component | Vulnerability Type |
|---|---|---|---|
| CVE-2026-4439 | Critical | WebGL | Out of bounds memory access |
| CVE-2026-4440 | Critical | WebGL | Out of bounds read and write |
| CVE-2026-4441 | Critical | Base | Use after free |
| CVE-2026-4442 | High | CSS | Heap buffer overflow |
| CVE-2026-4443 | High | WebAudio | Heap buffer overflow |
| CVE-2026-4444 | High | WebRTC | Stack buffer overflow |
| CVE-2026-4445 | High | WebRTC | Use after free |
| CVE-2026-4446 | High | WebRTC | Use after free |
| CVE-2026-4447 | High | V8 | Inappropriate implementation |
| CVE-2026-4448 | High | ANGLE | Heap buffer overflow |
| CVE-2026-4449 | High | Blink | Use after free |
| CVE-2026-4450 | High | V8 | Out of bounds write |
| CVE-2026-4451 | High | Navigation | Insufficient validation of untrusted input |
| CVE-2026-4452 | High | ANGLE | Integer overflow |
| CVE-2026-4453 | High | Dawn | Integer overflow |
| CVE-2026-4454 | High | Network | Use after free |
| CVE-2026-4455 | High | PDFium | Heap buffer overflow |
| CVE-2026-4456 | High | Digital Credentials API | Use after free |
| CVE-2026-4457 | High | V8 | Type Confusion |
| CVE-2026-4458 | High | Extensions | Use after free |
| CVE-2026-4459 | High | WebAudio | Out of bounds read and write |
| CVE-2026-4460 | High | Skia | Out of bounds read |
| CVE-2026-4461 | High | V8 | Inappropriate implementation |
| CVE-2026-4462 | High | Blink | Out of bounds read |
| CVE-2026-4463 | High | WebRTC | Heap buffer overflow |
| CVE-2026-4464 | Medium | ANGLE | Integer overflow |
To lower the chance of a system breach, users should check their browser versions right away.
