{"id":11563,"date":"2026-03-24T10:03:34","date_gmt":"2026-03-24T10:03:34","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/03\/24\/chrome-security-update-fixes-8-vulnerabilities-allowing-remote-code-execution\/"},"modified":"2026-03-24T10:03:34","modified_gmt":"2026-03-24T10:03:34","slug":"chrome-security-update-fixes-8-vulnerabilities-allowing-remote-code-execution","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/03\/24\/chrome-security-update-fixes-8-vulnerabilities-allowing-remote-code-execution\/","title":{"rendered":"Chrome Security Update Fixes 8 Vulnerabilities Allowing Remote Code Execution"},"content":{"rendered":"<p>    Chrome Security Update Fixes 8 Vulnerabilities Allowing Remote Code Execution<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n    <!-- no image --><br \/>\n \t<BR><br \/>\n<BR><\/BR><\/p>\n<div>\n<p>Google has rolled out an urgent security update for the Chrome browser to address eight high-severity vulnerabilities.<\/p>\n<p>These newly patched security flaws could allow threat actors to execute arbitrary code remotely, <a href=\"https:\/\/cybersecuritynews.com\/multiple-ivanti-endpoint-manager-vulnerability\/\" target=\"_blank\" rel=\"noreferrer noopener\">posing a significant risk to user data and system integrity.<\/a><\/p>\n<p>The stable channel is currently receiving updates to version 146.0.7680.164 or 146.0.7680.165 for <a href=\"https:\/\/cybersecuritynews.com\/malicious-vs-code-extension-as-icon-theme\/\" target=\"_blank\" rel=\"noreferrer noopener\">Windows and macOS users<\/a>.<\/p>\n<p>Meanwhile, Linux users will receive version 146.0.7680.164. Google expects these critical updates to reach all users over the coming days and weeks.<\/p>\n<h2 class=\"wp-block-heading\" id=\"h-chrome-security-update\"><strong>Chrome Security Update<\/strong><\/h2>\n<p>The latest patches resolve several dangerous memory management and processing errors within Chrome\u2019s underlying architecture.<\/p>\n<p>Among the patched issues are \u201c<a href=\"https:\/\/cybersecuritynews.com\/linux-kernel-use-after-free-vulnerability-exploited\/\" target=\"_blank\" rel=\"noreferrer noopener\">Use-After-Free<\/a>\u201d vulnerabilities in components such as Dawn, WebGPU, and FedCM.<\/p>\n<p>These specific flaws occur when a program continues to use a memory pointer after the memory has been freed, allowing attackers to inject and execute malicious payloads.<\/p>\n<p>Additionally, Google addressed heap buffer overflows in WebAudio and WebGL, out-of-bounds reading flaws in CSS, and an integer overflow in the Fonts component.<\/p>\n<p>When chained together or successfully exploited, these memory corruption vulnerabilities give cybercriminals a path to bypass browser security sandboxes and compromise the host machine entirely.<\/p>\n<p><a href=\"https:\/\/chromereleases.googleblog.com\/2026\/03\/stable-channel-update-for-desktop_23.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Google\u2019s development teams heavily rely on advanced testing tools<\/a> such as AddressSanitizer, MemorySanitizer, and libFuzzer to identify complex security bugs before they reach the stable channel.<\/p>\n<p>The update addresses the following eight high-severity vulnerabilities:<\/p>\n<figure class=\"wp-block-table is-style-stripes\">\n<table class=\"has-fixed-layout\">\n<thead>\n<tr>\n<th class=\"has-text-align-left\" data-align=\"left\">CVE Identifier<\/th>\n<th class=\"has-text-align-left\" data-align=\"left\">Component<\/th>\n<th class=\"has-text-align-left\" data-align=\"left\">Vulnerability Type<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td class=\"has-text-align-left\" data-align=\"left\">CVE-2026-4673<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">WebAudio<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">Heap buffer overflow<\/td>\n<\/tr>\n<tr>\n<td class=\"has-text-align-left\" data-align=\"left\">CVE-2026-4674<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">CSS<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">Out of bounds read<\/td>\n<\/tr>\n<tr>\n<td class=\"has-text-align-left\" data-align=\"left\">CVE-2026-4675<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">WebGL<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">Heap buffer overflow<\/td>\n<\/tr>\n<tr>\n<td class=\"has-text-align-left\" data-align=\"left\">CVE-2026-4676<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">Dawn<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">Use after free<\/td>\n<\/tr>\n<tr>\n<td class=\"has-text-align-left\" data-align=\"left\">CVE-2026-4677<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">WebAudio<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">Out of bounds read<\/td>\n<\/tr>\n<tr>\n<td class=\"has-text-align-left\" data-align=\"left\">CVE-2026-4678<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">WebGPU<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">Use after free<\/td>\n<\/tr>\n<tr>\n<td class=\"has-text-align-left\" data-align=\"left\">CVE-2026-4679<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">Fonts<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">Integer overflow<\/td>\n<\/tr>\n<tr>\n<td class=\"has-text-align-left\" data-align=\"left\">CVE-2026-4680<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">FedCM<\/td>\n<td class=\"has-text-align-left\" data-align=\"left\">Use after free<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n<p>To protect the user base, Google intentionally restricts access to specific technical bug details and exploit links.<\/p>\n<p>This industry standard practice ensures that most users can install the security update before threat actors can <a href=\"https:\/\/cybersecuritynews.com\/pdfly-variant-uses-custom-pyinstaller-modification\/\" target=\"_blank\" rel=\"noreferrer noopener\">reverse-engineer the patch to launch widespread attacks.<\/a><\/p>\n<p>The company also maintains restrictions if a vulnerability exists in a third-party library that other software projects depend on.<\/p>\n<p>Google actively rewards security researchers for responsibly disclosing these threats, paying out a confirmed $7,000 <a href=\"https:\/\/cybersecuritynews.com\/chrome-webaudio-vulnerability\/\" target=\"_blank\" rel=\"noreferrer noopener\">bounty for the WebAudio vulnerability alone<\/a>, with several other reward amounts still to be determined.<\/p>\n<p>Cybersecurity professionals and everyday users must prioritize applying this update immediately.<\/p>\n<p>To ensure your browser is fully protected against these potential remote code execution threats, <a href=\"https:\/\/cybersecuritynews.com\/chrome-security-update-patch-vulnerabilities\/\" target=\"_blank\" rel=\"noreferrer noopener\">navigate to the Chrome menu<\/a>, select \u201cHelp,\u201d and click on \u201cAbout Google Chrome.\u201d<\/p>\n<p>This action forces the browser to check for the latest version and automatically download the security patch.<\/p>\n<p>Administrators managing enterprise environments should push the update through their patch management systems to efficiently secure network endpoints.<\/p>\n<p class=\"has-text-align-center has-background\" style=\"background:linear-gradient(180deg,rgb(238,238,238) 94%,rgb(169,184,195) 100%)\"><strong>Follow us on <a href=\"https:\/\/news.google.com\/publications\/CAAqMggKIixDQklTR3dnTWFoY0tGV041WW1WeWMyVmpkWEpwZEhsdVpYZHpMbU52YlNnQVAB?hl=en-IN&amp;gl=IN&amp;ceid=IN:en\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Google News<\/a>, <a href=\"https:\/\/www.linkedin.com\/company\/cybersecurity-news\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">LinkedIn<\/a>, and <a href=\"https:\/\/x.com\/cyber_press_org\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">X<\/a> for daily cybersecurity updates. <a href=\"https:\/\/cybersecuritynews.com\/contact-us\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Contact us<\/a> to feature your stories.<\/strong><\/p>\n<p>The post <a href=\"https:\/\/cybersecuritynews.com\/chrome-security-update-8-vulnerabilities\/\">Chrome Security Update Fixes 8 Vulnerabilities Allowing Remote Code Execution<\/a> appeared first on <a href=\"https:\/\/cybersecuritynews.com\/\">Cyber Security News<\/a>.<\/p>\n<\/div>\n<p> \t<BR><br \/>\n <BR><\/BR><br \/>\n    Abinaya<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n<a href=\"https:\/\/cybersecuritynews.com\/chrome-security-update-8-vulnerabilities\/\">Go to cyber-security-news<\/a><br \/>\n \t<BR><br \/>\n <BR><\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Chrome Security Update Fixes 8 Vulnerabilities Allowing Remote Code Execution Google has rolled out an urgent security update for the Chrome browser to address eight high-severity vulnerabilities. These newly patched security flaws could allow threat actors to execute arbitrary code remotely, posing a significant risk to user data and system integrity. The stable channel is [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[768,129,63,2178],"tags":[130],"class_list":["post-11563","post","type-post","status-publish","format-standard","hentry","category-chrome","category-cyber-security","category-cyber-security-news","category-security-updates","tag-cyber-security-news"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/11563"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=11563"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/11563\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=11563"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=11563"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=11563"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}