InfoSecBulletin Cybersecurity for mankind
Chrome 151 has a new update that fixes 382 security problems. This includes 15 critical issues that could allow attackers to run harmful code and take over the browser if not fixed.
Google is sending out this update for Windows, macOS, Linux, and Chrome for iOS. The update has security fixes for many important parts of the browser. Google’s release notes say that Chrome 151 (with desktop build 150.0.7871.46) has 382 different security fixes that are part of the Chrome Vulnerability Rewards Program.
Bug details remain partially restricted until the majority of users receive the update, in line with Google’s standard coordinated disclosure process.
Hackers accessed a US defense manufacturer’s Microsoft 365 account via phishing.
Google Play Apps Utilize Stealth Loaders to Spread Anatsa Banking Malware
Bangladeshi org listed “the Gentlemen’ ransomware victim list: CIRT warns
Around 800 Malicious npm Packages Distribute Cross-Platform RAT and Infostealer
Google Chrome 151 Update Fixes 41 Flaws, 6 Critical
Swiss gov.t SharePoint incident compromised 200 accounts
Azad president, Secretary Post Heads to Contest: ISACA Dhaka Chapter Election
Urgent patch! Cisco and IMB patch multiple flaws
OWASP Unveils GenAI LLM Top 10 2026 For Modern AI APPS
Greatness PhaaS Evades Email Security and MFA to Take Over Microsoft 365 Accounts
The patch set fixes serious flaws like remote code execution and minor issues with the user interface and rules for web, graphics, casting, networking, and iOS parts.
Many of these bugs were found by Google with current memory-safety tools like AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, and fuzzing tools.
Chrome Update Patches 382 Vulnerabilities
| CVE ID | Component | Root cause / bug class | Reported by | Report date |
|---|---|---|---|---|
| CVE-2026-13774 | Extensions | Use after free in Extensions | 2026-04-26 | |
| CVE-2026-13775 | GPU | Use after free in GPU | 2026-05-10 | |
| CVE-2026-13776 | Dawn | Type confusion in Dawn | 2026-05-14 | |
| CVE-2026-13777 | iOSWeb | Insufficient validation of untrusted input in iOSWeb | 2026-05-14 | |
| CVE-2026-13778 | WebUSB | Use after free in WebUSB | 2026-05-14 | |
| CVE-2026-13779 | Chromoting | Use after free in Chromoting | 2026-05-14 | |
| CVE-2026-13780 | ANGLE | Insufficient validation of untrusted input in ANGLE | 2026-05-19 | |
| CVE-2026-13781 | Skia | Insufficient validation of untrusted input in Skia | 2026-05-25 | |
| CVE-2026-13782 | Browser | Use after free in Browser | 2026-05-26 | |
| CVE-2026-13783 | Views | Use after free in Views | 2026-05-27 | |
| CVE-2026-13784 | Views | Use after free in Views | 2026-05-27 | |
| CVE-2026-13785 | Bluetooth | Use after free in Bluetooth | 2026-05-27 | |
| CVE-2026-13786 | Ozone | Use after free in Ozone | 2026-05-29 | |
| CVE-2026-13787 | Chromoting | Use after free in Chromoting | 2026-06-11 | |
| CVE-2026-13788 | Fullscreen | Use after free in Fullscreen | 2026-06-12 |
Mitigations
Google recommends that all users update to the latest Chrome 151 stable release as soon as possible to mitigate the risk of code execution attacks based on these vulnerabilities.
