InfoSecBulletin Cybersecurity for mankind
Google has launched a major security update for its Chrome browser. This update fixes 26 unique vulnerabilities that might let attackers run harmful code from a distance. The new Stable channel update brings versions 146.0.7680.153 and 146.0.7680.154 for Windows and macOS. Linux users will get version 146.0.7680.153.
This important update is meant to fix several serious memory problems that can harm both individual users and large networks. This report follows standard cybersecurity formats. It shows the biggest threats we dealt with in this release.
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
By infosecbulletin
/ Monday , October 19 2026
NSA, CISA, and NIST have released security guidelines to find, control, and stop AI agents that go beyond their allowed...
Read More
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
By infosecbulletin
/ Sunday , October 18 2026
Anthropic says a Claude research model showed how the National Security Agency made seeds for five NIST elliptic curves in...
Read More
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
By infosecbulletin
/ Saturday , October 17 2026
The Indian Computer Emergency Response Team (CERT-In), which is the government's cybersecurity arm, has issued a "critical" rated advisory after...
Read More
MITRE ATT&CK v20 Unveils 9 New Attack Techniques On AI Exploits, MFA Bypass, and CAPTCHA Evasion
By infosecbulletin
/ Friday , October 16 2026
MITRE released ATT&CK v20 adding nine Enterprise techniques that explain how attackers might target AI systems, steal app-specific passwords to...
Read More
Hackers Exploit Fortinet Flaws to Deploy Stealthy PEERSTITCH Malware on FortiGate Firewalls
By infosecbulletin
/ Friday , October 16 2026
Cybersecurity researchers at Palo Alto Networks’ Unit 42 have uncovered a sophisticated cyberattack targeting Fortinet network management infrastructure, involving the...
Read More
Hacker stole Meta GitHub repos; Stole Source Code
By infosecbulletin
/ Thursday , October 15 2026
Meta is informing about 1,500 people—mainly employers in the US, that their personal data was affected after hackers broke into...
Read More
Urgent patch! Zoom,NVIDIA and IBM Patch 41 Security flaws
By infosecbulletin
/ Wednesday , October 14 2026
Zoom released four security updates on October 13, 2026, all addressing serious problems. Two Zoom Workplace issues let users gain...
Read More
Microsoft patches record braking 1411 flaws; 2 zero days
By infosecbulletin
/ Wednesday , October 14 2026
Microsoft breaks its record to its patch history. The company patched record 1411 flaws and 3 zero day of its...
Read More
Anthropic unveils “OSS Scanner” Free AI Vulnerability Scanner for Open-Source Projects
By infosecbulletin
/ Saturday , October 10 2026
Anthropic unveiled OSS Scanner on Thursday as an opt-in vulnerability scanner designed to enhance security within the open-source ecosystem through...
Read More
Rise on RCE Exploits Targeting Hikvision Camera Flaw
By infosecbulletin
/ Friday , October 9 2026
There was a rise in scanning and remote code execution attempts on video surveillance devices in Ukraine from September 21...
Read More
| CVE Identifier | Severity | Browser Component | Vulnerability Type |
|---|---|---|---|
| CVE-2026-4439 | Critical | WebGL | Out of bounds memory access |
| CVE-2026-4440 | Critical | WebGL | Out of bounds read and write |
| CVE-2026-4441 | Critical | Base | Use after free |
| CVE-2026-4442 | High | CSS | Heap buffer overflow |
| CVE-2026-4443 | High | WebAudio | Heap buffer overflow |
| CVE-2026-4444 | High | WebRTC | Stack buffer overflow |
| CVE-2026-4445 | High | WebRTC | Use after free |
| CVE-2026-4446 | High | WebRTC | Use after free |
| CVE-2026-4447 | High | V8 | Inappropriate implementation |
| CVE-2026-4448 | High | ANGLE | Heap buffer overflow |
| CVE-2026-4449 | High | Blink | Use after free |
| CVE-2026-4450 | High | V8 | Out of bounds write |
| CVE-2026-4451 | High | Navigation | Insufficient validation of untrusted input |
| CVE-2026-4452 | High | ANGLE | Integer overflow |
| CVE-2026-4453 | High | Dawn | Integer overflow |
| CVE-2026-4454 | High | Network | Use after free |
| CVE-2026-4455 | High | PDFium | Heap buffer overflow |
| CVE-2026-4456 | High | Digital Credentials API | Use after free |
| CVE-2026-4457 | High | V8 | Type Confusion |
| CVE-2026-4458 | High | Extensions | Use after free |
| CVE-2026-4459 | High | WebAudio | Out of bounds read and write |
| CVE-2026-4460 | High | Skia | Out of bounds read |
| CVE-2026-4461 | High | V8 | Inappropriate implementation |
| CVE-2026-4462 | High | Blink | Out of bounds read |
| CVE-2026-4463 | High | WebRTC | Heap buffer overflow |
| CVE-2026-4464 | Medium | ANGLE | Integer overflow |
To lower the chance of a system breach, users should check their browser versions right away.
