Google Rolls Out Emergency Chrome Update to Patch 10 Critical Security Vulnerabilities
Google has released a security update for its Chrome browser to address ten identified vulnerabilities. This update was deployed on Tue, Mar 3, 2026, and focuses on resolving three critical and seven high-severity issues to prevent potential exploits…
Google has released a security update for its Chrome browser to address ten identified vulnerabilities. This update was deployed on Tue, Mar 3, 2026, and focuses on resolving three critical and seven high-severity issues to prevent potential exploits that could compromise affected systems.
The update is currently being rolled out and will provide Windows and Mac users with Chrome version 145.0.7632.159/160, while Linux users will receive version 145.0.7632.159. As part of its security protocol, Google restricts access to detailed bug information until the update is widely installed, thereby preventing threat actors from exploiting the vulnerabilities.
The update addresses significant memory management and implementation errors in core Chrome components. Notably, it resolves three critical flaws: integer overflows in the ANGLE and Skia graphics engines, and an object lifecycle issue in the PowerVR component.
Substantial bug bounties were awarded to security researchers who uncovered these vulnerabilities. Researcher cinzinga received $33,000 for the ANGLE vulnerability, and Zhihua Yao of KunLun Lab was awarded $32,000 for the PowerVR vulnerability. Several bugs were detected using advanced memory sanitization tools such as AddressSanitizer and libFuzzer.
CVE ID Severity Component Vulnerability Discoverer / Reward
CVE-2026-3536 Critical Integer overflow in ANGLE cinzinga ($33,000)
CVE-2026-3537 Critical Object lifecycle issue in PowerVR Zhihua Yao ($32,000)
Google has released a security update for its Chrome browser to address ten identified vulnerabilities.
CVE-2026-3538 Critical Integer overflow in Skia Symeon Paraschoudis (TBD)
CVE-2026-3539 High Object lifecycle issue in DevTools Zhenpeng (Leo) Lin (TBD)
CVE-2026-3540 High Inappropriate implementation in WebAudio Davi Antônio Cruz (TBD)
CVE-2026-3541 High Inappropriate implementation in CSS Syn4pse (TBD)
CVE-2026-3542 High Inappropriate implementation in WebAssembly qymag1c (TBD)
CVE-2026-3543 High Inappropriate implementation in V8 qymag1c (TBD)
CVE-2026-3544 High Heap buffer overflow in WebCodecs Anonymous (TBD)
CVE-2026-3545 High Insufficient data validation in Navigation Google (Internal)
It is critical for users and enterprise administrators to apply this update promptly to safeguard against potential exploits. Users can manually initiate the update by navigating to the Chrome menu, selecting "Help," and clicking "About Google Chrome." This will prompt the browser to check for the latest version and download the patch. Completion of the download requires a browser restart to implement the changes effectively.
Security teams should ensure that automated patch management systems are updated to push version 145 across corporate endpoints, thereby securing organizational networks against these vulnerabilities.
Based on reporting by GBHackers.
