Chrome Patches 108 Vulnerabilities Including Crticial Flaws that Enable Code Execution Attacks
Google patched 108 vulnerabilities in Chrome 154, including critical memory-safety flaws that could enable remote code execution.
Google has released Chrome 154 to patch 108 security vulnerabilities, including 11 critical memory-safety flaws that could allow code execution via malicious web content. The critical bugs include buffer overflows in the ANGLE graphics layer (CVE-2026-95350, CVE-2026-95281, CVE-2026-95284) and out-of-bounds writes in the GPU component. The update also fixes high-severity type confusion and out-of-bounds write flaws in the V8 JavaScript engine. Google has restricted access to some bug details to mitigate exploitation risk before users update.
- Google patched 108 vulnerabilities in Chrome 154, including critical memory-safety flaws.
- Critical flaws in ANGLE, WebGL, and GPU components could enable remote code execution.
- Google awarded a $5,000 bounty for one of the most severe ANGLE buffer overflow bugs.
- The update also addresses high-severity issues in the V8 JavaScript engine.
- CVEs
- CVE-2026-95350CVE-2026-95281CVE-2026-95284CVE-2026-95349CVE-2026-95329CVE-2026-95357CVE-2026-95322CVE-2026-95339CVE-2026-95313CVE-2026-95356CVE-2026-95310CVE-2026-95304CVE-2026-95306
- Vendors
- Organizations
- GoogleSTAR Labs SG Pte. Ltd.OpenAI
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-95350 | Heap buffer overflow in Google Chrome ANGLE on Android | 9.6 group max | <1% | PoC |
From the original article
3 min read at cybersecuritynews.com
Google has released Chrome 154 for Windows, macOS, and Linux, fixing 108 security vulnerabilities, including several critical memory-safety flaws that could potentially allow attackers to execute code through malicious web content. The update is rolling out gradually as Chrome 154. 0.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.