Google Issues Emergency Chrome Security Update to Address High-Severity PDFium and V8 Flaws
Google has released a critical security update for the Chrome Stable Channel to address several vulnerabilities, including high-severity issues within the browser's core engines.
Google has released a critical security update for the Chrome Stable Channel to address several vulnerabilities, including high-severity issues within the browser's core engines.
The update is available in versions 145.0.7632.109/110 for Windows and Mac, and version 144.0.7559.109 for Linux. This rollout is currently in progress globally, providing security patches that mitigate potential exploitation risks.
It is essential for security teams and users to implement these updates promptly to prevent exploitation that could lead to arbitrary code execution or browser instability.
The update primarily addresses memory-handling vulnerabilities in PDFium and V8.
CVE ID Severity Description
CVE-2026-2648 High Heap buffer overflow in PDFium
The update is available in versions 145.0.7632.109/110 for Windows and Mac, and version 144.0.7559.109 for Linux.
CVE-2026-2649 High Integer overflow in V8 JavaScript engine
CVE-2026-2650 Medium Heap buffer overflow in Media component
The high-severity issue CVE-2026-2648 involves a heap buffer overflow in PDFium, the default PDF rendering engine. This vulnerability was reported by security researcher Soiax. Such overflows can lead to crashes or allow arbitrary code execution.
Another critical flaw, CVE-2026-2649, is an integer overflow in the V8 JavaScript engine, discovered by JunYoung Park of the KAIST Hacking Lab. Integer overflows can be exploited to bypass security checks or cause memory corruption.
The medium-severity issue, CVE-2026-2650, identified internally by Google, involves a heap buffer overflow in the Media component.
According to Google's security disclosure policy, detailed information on these bugs and exploit demonstrations is restricted to prevent threat actors from reverse-engineering patches before most users have updated their browsers.
Users can manually update by going to the Chrome menu, selecting Help, and clicking About Google Chrome. The browser will automatically check for updates and download the latest version. To activate the security patches, users must relaunch the browser.
Based on reporting by Cyber Security News.
