Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
CybersecurityAI-assisted

Google Issues Emergency Chrome Security Update to Address High-Severity PDFium and V8 Flaws

Google has released a critical security update for the Chrome Stable Channel to address several vulnerabilities, including high-severity issues within the browser's core engines.

Google has released a critical security update for the Chrome Stable Channel to address several vulnerabilities, including high-severity issues within the browser's core engines.

The update is available in versions 145.0.7632.109/110 for Windows and Mac, and version 144.0.7559.109 for Linux. This rollout is currently in progress globally, providing security patches that mitigate potential exploitation risks.

It is essential for security teams and users to implement these updates promptly to prevent exploitation that could lead to arbitrary code execution or browser instability.

The update primarily addresses memory-handling vulnerabilities in PDFium and V8.

CVE ID Severity Description

CVE-2026-2648 High Heap buffer overflow in PDFium

The update is available in versions 145.0.7632.109/110 for Windows and Mac, and version 144.0.7559.109 for Linux.
Madison Drake · Thehackingpost

CVE-2026-2649 High Integer overflow in V8 JavaScript engine

CVE-2026-2650 Medium Heap buffer overflow in Media component

The high-severity issue CVE-2026-2648 involves a heap buffer overflow in PDFium, the default PDF rendering engine. This vulnerability was reported by security researcher Soiax. Such overflows can lead to crashes or allow arbitrary code execution.

Another critical flaw, CVE-2026-2649, is an integer overflow in the V8 JavaScript engine, discovered by JunYoung Park of the KAIST Hacking Lab. Integer overflows can be exploited to bypass security checks or cause memory corruption.

Advertisement

The medium-severity issue, CVE-2026-2650, identified internally by Google, involves a heap buffer overflow in the Media component.

According to Google's security disclosure policy, detailed information on these bugs and exploit demonstrations is restricted to prevent threat actors from reverse-engineering patches before most users have updated their browsers.

Users can manually update by going to the Chrome menu, selecting Help, and clicking About Google Chrome. The browser will automatically check for updates and download the latest version. To activate the security patches, users must relaunch the browser.

Based on reporting by Cyber Security News.

AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories