Loading article…
Google’s Chrome 148 update fixes 151 vulnerabilities—22 critical—across Windows, macOS, Linux and Android, with no known exploits in the wild.
Google released a Chrome 148 security update that addresses 151 vulnerabilities, 22 of them classified as critical [1]. The patch, rolling out from May 27, spans desktop and mobile browsers and is intended to close memory‑safety bugs such as use‑after‑free and out‑of‑bounds errors.
Key takeaways
The update brings Chrome to version 148.0.7778.216/217 for Windows, 148.0.7778.215/216 for macOS, 148.0.7778.215 for Linux, and 148.0.7778.215 for Android, while iOS users receive Chrome 149.0.7827.45 [2]. Google began rolling out the patches on May 27, with the stable channel slated to reach users over the next weeks [1][3]. The majority of the vulnerabilities were discovered by Google’s own security teams, reflecting a trend toward automated and AI‑assisted auditing, though Google has not confirmed AI involvement [1].
Among the 22 critical bugs are four that earned external bounty rewards ranging from $5,000 to $43,000 each. These include CVE‑2026‑9872 (GPU out‑of‑bounds write), CVE‑2026‑9873 (Network use‑after‑free), CVE‑2026‑9874 (Dawn use‑after‑free) and CVE‑2026‑9875 (WebGL out‑of‑bounds read) [1]. Researcher Cinzinga reported the first two and received $86,000 in total [1]. Other critical issues highlighted by Forbes involve a use‑after‑free in WebRTC (CVE‑2026‑9111) and an UI implementation flaw (CVE‑2026‑9110), both unexploited in the wild [3][4].
Google advises users to let Chrome update automatically, but manual installation is possible via Settings → Help → About Google Chrome, which triggers a download and prompts a browser restart [1][2][4]. Prompt updating is recommended because attackers often study patches to craft exploits for older versions [2].
The sheer volume of fixes underscores Chrome’s ongoing exposure to memory‑corruption bugs that can enable remote code execution. While none of the disclosed flaws have been observed in active attacks, the rapid patch cycle aims to stay ahead of potential exploits. The update’s rollout across all major platforms ensures a broad protective baseline, and the continued reliance on internal discovery suggests Google’s security tooling—potentially including AI‑driven fuzzers—remains a key defense mechanism. Users should verify they are on the latest version to benefit from these protections.
Coverage is mostly measured — 246 of 300 reports stay neutral.
Every Monday — the token unlocks, Fed dates & catalysts set to move crypto and markets this week. So you’re never blindsided.
Free · 3-min read · one-click unsubscribe
Google is a trending topic in the news. Recent coverage of Google includes: Google's 32 Million-Strong Mosquito Army To Fight.
20 news sources analyzed
Based on our analysis of recent news articles, Google has mixed coverage. Check the sentiment score above for detailed analysis.
TrendWatcher aggregates Google news from 100+ trusted sources and provides AI-powered sentiment analysis updated in real-time.
AI-assisted synthesis by the TrendWatcher Editorial Desk · sourced from 4 outlets · May 31, 2026 · How we report