Google Chrome Updates

[harlan4096]

Google Chrome 145.0.7632.109/110 Stable Channel Update for Desktop

The Stable channel has been updated to 145.0.7632.109/110 for Windows/Mac and 144.0.7559.109 for Linux, which will roll out over the coming days/weeks.

This update includes 3 security fixes.

[TBD]477033835 High CVE-2026-2648: Heap buffer overflow in PDFium. Reported by soiax on 2026-01-19
[TBD]481074858 High CVE-2026-2649: Integer overflow in V8. Reported by JunYoung Park(@candymate) of KAIST Hacking Lab on 2026-02-03
[N/A]476461867 Medium CVE-2026-2650: Heap buffer overflow in Media. Reported by Google on 2026-01-18

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 145.0.7632.116/117 Stable Channel Update for Desktop

The Stable channel has been updated to 145.0.7632.116/117 for Windows/Mac and 144.0.7559.116 for Linux, which will roll out over the coming days/weeks.

This update includes 3 security fixes.

TBD]482862710 High CVE-2026-3061: Out of bounds read in Media. Reported by Luke Francis on 2026-02-09
[TBD]483751167 High CVE-2026-3062: Out of bounds read and write in Tint. Reported by cinzinga on 2026-02-11
[TBD]485287859 High CVE-2026-3063: Inappropriate implementation in DevTools. Reported by M. Fauzan Wijaya (Gh05t666nero) on 2026-02-17

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 145.0.7632.159/160 Stable Channel Update for Desktop

The Stable channel has been updated to 145.0.7632.159/160 for Windows/Mac and 145.0.7632.159 for Linux, which will roll out over the coming days/weeks.
A full list of changes in this build is available in the Log

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 146.0.7680.71/72 Stable Channel Update for Desktop

Chrome 146.0.7680.71 (Linux) 146.0.7680.71/72 Windows/Mac contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new features and big efforts delivered in 146.

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 146.0.7680.80 Stable Channel Update for Desktop

The Stable channel has been updated to 146.0.7680.80 for Windows/Mac and 146.0.7680.80 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log

This update includes 1 security fix. Please see the Chrome Security Page for more information.

• [N/A] 491421267 High CVE-2026-3909: Out of bounds write in Skia. Reported by Google Threat Analysis Group on 2026-03-10
  

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 146.0.7680.153/154 Stable Channel Update for Desktop

The Security Fixes and Rewards part was added later, with 26 security fixes!

This update includes 26 security fixes.

[TBD][475877320] Critical CVE-2026-4439: Out of bounds memory access in WebGL. Reported by Goodluck on 2026-01-15
[TBD][485935305] Critical CVE-2026-4440: Out of bounds read and write in WebGL. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-20
[TBD][489381399] Critical CVE-2026-4441: Use after free in Base. Reported by Google on 2026-03-03
[TBD][484751092] High CVE-2026-4442: Heap buffer overflow in CSS. Reported by Syn4pse on 2026-02-16
[TBD][485292589] High CVE-2026-4443: Heap buffer overflow in WebAudio. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-18
[TBD][486349161] High CVE-2026-4444: Stack buffer overflow in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-21
[TBD][486421953] High CVE-2026-4445: Use after free in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-22
[TBD][486421954] High CVE-2026-4446: Use after free in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-22
[TBD][486657483] High CVE-2026-4447: Inappropriate implementation in V8. Reported by Erge on 2026-02-23
[TBD][486972661] High CVE-2026-4448: Heap buffer overflow in ANGLE. Reported by M. Fauzan Wijaya (Gh05t666nero) on 2026-02-23
[TBD][487117772] High CVE-2026-4449: Use after free in Blink. Reported by Syn4pse on 2026-02-24
[TBD][487746373] High CVE-2026-4450: Out of bounds write in V8. Reported by qymag1c on 2026-02-26
[TBD][487768779] High CVE-2026-4451: Insufficient validation of untrusted input in Navigation. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-26
[TBD][487977696] High CVE-2026-4452: Integer overflow in ANGLE. Reported by cinzinga on 2026-02-26
[TBD][488400770] High CVE-2026-4453: Integer overflow in Dawn. Reported by sweetchip on 2026-02-27
[TBD][488585488] High CVE-2026-4454: Use after free in Network. Reported by heapracer (@heapracer) on 2026-03-01
[TBD][488585504] High CVE-2026-4455: Heap buffer overflow in PDFium. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-01
[TBD][488617440] High CVE-2026-4456: Use after free in Digital Credentials API. Reported by sean wong on 2026-02-28
[TBD][488803413] High CVE-2026-4457: Type Confusion in V8. Reported by Zhenpeng (Leo) Lin at depthfirst on 2026-03-01
[TBD][489619753] High CVE-2026-4458: Use after free in Extensions. Reported by Shaheen Fazim on 2026-03-04
[TBD][490246422] High CVE-2026-4459: Out of bounds read and write in WebAudio. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) on 2026-03-06
[TBD][490254124] High CVE-2026-4460: Out of bounds read in Skia. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-06
[TBD][490558172] High CVE-2026-4461: Inappropriate implementation in V8. Reported by Google on 2026-03-07
[TBD][491080830] High CVE-2026-4462: Out of bounds read in Blink. Reported by heapracer (@heapracer) on 2026-03-09
[TBD][491358681] High CVE-2026-4463: Heap buffer overflow in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-10
[TBD][487208468] Medium CVE-2026-4464: Integer overflow in ANGLE. Reported by heesun on 2026-02-24

https://chromereleases.googleblog.com/20...op_18.html

[harlan4096]

Google Chrome 146.0.7680.177/178 Stable Channel Update for Desktop

The Stable channel has been updated to 146.0.7680.177/178 for Windows/Mac and 146.0.7680.177 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 147.0.7727.101/102 Stable Channel Update for Desktop

The Stable channel has been updated to 147.0.7727.101/102 for Windows/Mac and 147.0.7727.101 for Linux, which will roll out over the coming days/weeks.

This update includes 31 security fixes.

Stable Channel Update for Deskto

[harlan4096]

Google Chrome 147.0.7727.116/117 Stable Channel Update for Desktop

The Stable channel has been updated to 147.0.7727.116/117 for Windows/Mac and 147.0.7727.116 for Linux, which will roll out over the coming days/weeks.

This update includes 19 security fixes.

Below, we highlight fixes that were contributed by external researchers.
[TBD]493652473 High CVE-2026-6919: Use after free in DevTools. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-18
[TBD]499891888 High CVE-2026-6920: Out of bounds read in GPU. Reported by tatiwari of Microsoft on 2026-04-06
[TBD]493315759 Medium CVE-2026-6921: Race in GPU. Reported by soiax on 2026-03-17

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 147.0.7727.137/138 Stable Channel Update for Desktop

This update includes 30 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[$7000]494352590 Critical CVE-2026-7363: Use after free in Canvas. Reported by heapracer on 2026-03-19
[N/A]493221953 Critical CVE-2026-7361: Use after free in iOS. Reported by Google on 2026-03-16
[N/A]503419515 Critical CVE-2026-7344: Use after free in Accessibility. Reported by Google on 2026-04-16
[N/A]503645680 Critical CVE-2026-7343: Use after free in Views. Reported by Google on 2026-04-17
[$16000]493955227 High CVE-2026-7333: Use after free in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-19
[N/A]495852034 High CVE-2026-7360: Insufficient validation of untrusted input in Compositing. Reported by Google on 2026-03-24
[N/A]496284494 High CVE-2026-7359: Use after free in ANGLE. Reported by Google on 2026-03-25
[N/A]496285281 High CVE-2026-7358: Use after free in Animation. Reported by Google on 2026-03-25
[TBD]496456528 High CVE-2026-7334: Use after free in Views. Reported by Batuhan Eşref KOÇ on 2026-03-26
[N/A]497047552 High CVE-2026-7357: Use after free in GPU. Reported by Google on 2026-03-27
[N/A]497769116 High CVE-2026-7356: Use after free in Navigation. Reported by Google on 2026-03-30
[N/A]498746519 High CVE-2026-7354: Out of bounds read and write in Angle. Reported by Google on 2026-04-01
[N/A]498809718 High CVE-2026-7353: Heap buffer overflow in Skia. Reported by Google on 2026-04-01
[N/A]499023054 High CVE-2026-7352: Use after free in Media. Reported by Google on 2026-04-02
[N/A]499119490 High CVE-2026-7351: Race in MHTML. Reported by Google on 2026-04-02
[N/A]500018484 High CVE-2026-7350: Use after free in WebMIDI. Reported by Google on 2026-04-06
[N/A]500034684 High CVE-2026-7349: Use after free in Cast. Reported by Google on 2026-04-06
[N/A]500104917 High CVE-2026-7348: Use after free in Codecs. Reported by Google on 2026-04-06
[TBD]500387779 High CVE-2026-7335: Use after free in media. Reported by Jungwoo Lee (@physicube) and Wongi Lee (@_qwerty_po) on 2026-04-07
[TBD]500767595 High CVE-2026-7336: Use after free in WebRTC. Reported by Mozilla on 2026-04-09
[TBD]500880819 High CVE-2026-7337: Type Confusion in V8. Reported by q@calif.io on 2026-04-09
[N/A]501722605 High CVE-2026-7347: Use after free in Chromoting. Reported by Google on 2026-04-11
[N/A]502206907 High CVE-2026-7346: Inappropriate implementation in Tint. Reported by Google on 2026-04-13
[N/A]502248774 High CVE-2026-7345: Insufficient validation of untrusted input in Feedback. Reported by Google on 2026-04-13
[TBD]502449857 High CVE-2026-7338: Use after free in Cast. Reported by Krace on 2026-04-14
[N/A]503889643 High CVE-2026-7342: Use after free in WebView. Reported by Google on 2026-04-17
[N/A]504586599 High CVE-2026-7341: Use after free in WebRTC. Reported by Google on 2026-04-20
[$4000]493957495 Medium CVE-2026-7339: Heap buffer overflow in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-19
[$3000]497896137 Medium CVE-2026-7340: Integer overflow in ANGLE. Reported by 86ac1f1587b71893ed2ad792cd7dde32 on 2026-03-30
[N/A]498285711 Medium CVE-2026-7355: Use after free in Media. Reported by Google on 2026-03-31

Stable Channel Update for Desktop