Google has released Chrome 151, a stable update, which addresses 41 security issues, including six critical memory-safety flaws that could lead to crashes, memory corruption, or malicious code execution. They are tracked as CVE-2026-19137 and CVE-2026-19170. Chrome 151 Vulnerabilities The first flaw was reported anonymously, while the second was discovered by Muhammad Alifa Ramdhan, Pan ZhenPeng, and Billy Jheng Bing Jhong of STAR Labs SG Pte.
Other critical flaws include: - An Aura use-after-free bug - A Skia graphics library use-after-free vulnerability - A Views interface component use-after-free flaw Google addressed: - An ANGLE out-of-bounds write vulnerability - 35 high-severity vulnerabilities across various browser components These include Chrome's V8 JavaScript engine, GPU process, HTML renderer, media subsystem, Web Authentication implementation, extensions platform, payment features, translation service, workers, codecs, navigation handling, and crash-reporting functions. Critical Vulnerabilities Patched CVE Affected Component CVE-2026-19137 WebGL (Use-after-free) CVE-2026-19149 Aura (Use-after-free) CVE-2026-19154 Skia (Use-after-free) CVE-2026-19157 ANGLE (Out-of-bounds write) CVE-2026-19170 WebGL (Use-after-free) CVE-2026-19172 Views (Use-after-free) Such bugs are particularly significant because web browsers handle untrusted data from websites, advertisements, downloaded files, scripts, and extensions.
Google has delayed revealing technical details and proof-of-concept information for the vulnerabilities until most users update their Chrome browsers, aiming to minimize the risk of attackers exploiting unpatched systems.
