InfoSecBulletin Cybersecurity for mankind
Chrome 151 has a new update that fixes 382 security problems. This includes 15 critical issues that could allow attackers to run harmful code and take over the browser if not fixed.
Google is sending out this update for Windows, macOS, Linux, and Chrome for iOS. The update has security fixes for many important parts of the browser. Google’s release notes say that Chrome 151 (with desktop build 150.0.7871.46) has 382 different security fixes that are part of the Chrome Vulnerability Rewards Program.
Bug details remain partially restricted until the majority of users receive the update, in line with Google’s standard coordinated disclosure process.
“PentestCode” AI Agent Automating Penetration Testing with 18 Tools
CVE-2026-60137, CVE-2026-63030
Patch immediately! 2 high severity WordPress flaws found
Windows LegacyHive 0, AWS, Fortinet, TP-LINK multiple flaws got hackers attention
CVE-2026-53412
Zoom Warns of critical account takeover Flaw via Network Access
India to built Mythos-like AI model “Sarvam AI” and “BharatGen” assigned
Cursor, SonicWall, SharePoint 0-day exploited to the wild
Microsoft Patch Tuesday July-2026 fixes 570 flaws, 3 zero-days
Fortinet Patches 7 Flaws In FortiOS, FortiProxy, FortiPAM, and FortiSandbox
CISA warns Cisco IOS flaw, while VMware flaw allows bypassing authentication
Meta’s louisiana data center to exceed 250 billion price tag
The patch set fixes serious flaws like remote code execution and minor issues with the user interface and rules for web, graphics, casting, networking, and iOS parts.
Many of these bugs were found by Google with current memory-safety tools like AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, and fuzzing tools.
Chrome Update Patches 382 Vulnerabilities
| CVE ID | Component | Root cause / bug class | Reported by | Report date |
|---|---|---|---|---|
| CVE-2026-13774 | Extensions | Use after free in Extensions | 2026-04-26 | |
| CVE-2026-13775 | GPU | Use after free in GPU | 2026-05-10 | |
| CVE-2026-13776 | Dawn | Type confusion in Dawn | 2026-05-14 | |
| CVE-2026-13777 | iOSWeb | Insufficient validation of untrusted input in iOSWeb | 2026-05-14 | |
| CVE-2026-13778 | WebUSB | Use after free in WebUSB | 2026-05-14 | |
| CVE-2026-13779 | Chromoting | Use after free in Chromoting | 2026-05-14 | |
| CVE-2026-13780 | ANGLE | Insufficient validation of untrusted input in ANGLE | 2026-05-19 | |
| CVE-2026-13781 | Skia | Insufficient validation of untrusted input in Skia | 2026-05-25 | |
| CVE-2026-13782 | Browser | Use after free in Browser | 2026-05-26 | |
| CVE-2026-13783 | Views | Use after free in Views | 2026-05-27 | |
| CVE-2026-13784 | Views | Use after free in Views | 2026-05-27 | |
| CVE-2026-13785 | Bluetooth | Use after free in Bluetooth | 2026-05-27 | |
| CVE-2026-13786 | Ozone | Use after free in Ozone | 2026-05-29 | |
| CVE-2026-13787 | Chromoting | Use after free in Chromoting | 2026-06-11 | |
| CVE-2026-13788 | Fullscreen | Use after free in Fullscreen | 2026-06-12 |
Mitigations
Google recommends that all users update to the latest Chrome 151 stable release as soon as possible to mitigate the risk of code execution attacks based on these vulnerabilities.
