Google Patches 32 Chrome Flaws, One Rated Critical
The one Critical and 25 High ratings put the update among Chrome's larger recent patch loads, and the desktop rollout being gradual means users may stay exposed until they update manually.
Reporting from 1 source: ASCII.jp.
Google released Chrome updates for desktop and Android on September 29, fixing 32 vulnerabilities: one Critical, 25 High, one Medium, and five Low. The Critical flaw is CVE-2026-102331, a buffer overflow in ANGLE. Desktop builds Windows 154.0.8037.92/.93, macOS 154.0.8037.92/.93, and Linux 154.0.8037.92 roll out over days to weeks and can be applied manually. Android 154.0.8037.92 arrives on Google Play within a few days.
The Critical rating goes to CVE-2026-102331, a buffer overflow in ANGLE, the translation layer Chrome uses to route graphics calls. That is the only vulnerability in the batch tagged Critical. Among the 25 High severity entries are CVE-2026-102317, described as inappropriate permission management in Mojo, and CVE-2026-102312, an incorrect UI display in the Omnibox. CVE-2026-102320 carries a Medium rating for missing authentication in CORS.
The Low group includes CVE-2026-102310, missing authentication in Payments, and CVE-2026-102327, incorrect authentication in WebView. Desktop users get the fix over days to weeks or through Chrome's settings menu. Android users wait on Google Play.
Synthesized by Yomimono from the 1 cited source below, including Japanese-language reporting where cited, then editorially reviewed before publishing.
Sources
- ASCII.jp Google Chromeに"重大"な脆弱性