Chrome Update Fixes 26 Flaws, Two Rated Critical
The two critical use-after-free flaws in shared tab groups and WebGL make this update worth applying promptly, and the gradual desktop rollout means users may need to trigger it manually.
Reporting from 1 source: ASCII.jp.
Google released Chrome updates for desktop and Android on September 1, fixing 26 vulnerabilities. Two are rated critical: use-after-free bugs in shared tab groups and WebGL. Nine are high severity, ten medium, five low. Fixed versions are 152.0.7977.75/.76 for Windows and macOS, 152.0.7977.75 for Linux and Android. Desktop rollout takes days to weeks; the Android build reaches Google Play within days.
The two critical flaws carry CVE identifiers. CVE-2026-84353 is a use-after-free in shared tab groups, CVE-2026-84352 is a use-after-free in WebGL. The high-severity group includes an improper authorization issue in the file system (CVE-2026-84354) and an information disclosure in Skia (CVE-2026-84359).
Fixed versions are 152.0.7977.75/.76 for Windows and macOS, 152.0.7977.75 for Linux, and 152.0.7977.75 for Android. Desktop updates roll out over days to weeks, and users can trigger the update manually from Chrome settings. The Android build is scheduled for Google Play within days.
Synthesized by Yomimono from the 1 cited source below, including Japanese-language reporting where cited, then editorially reviewed before publishing.