Topic
Chrome
Top 10 Security Stories: WordPress XSS Flaw, PHP Vulnerabilities, and VMware ESX Issues Lead Weekly Roundup
Vulnerabilities & Exploits
Chrome Adds On-Device Gemini Nano While Ask Gemini Sends Page Content to Google Cloud
Privacy & Surveillance
One Request, Five Observers: What Websites, Providers, DNS and VPNs Learn When Loading a Page
Privacy & SurveillanceGoogle Releases Chrome Security Update Fixing 41 Vulnerabilities Including Six Critical Flaws
Google has issued a major security update for its Chrome browser addressing 41 vulnerabilities, six of which are rated Critical. The update covers Windows, macOS, and Linux platforms with new builds 151.0.7922.109 and 151.0.7922.108. Among the critical issues resolved is an out-of-bounds write vulnerability in ANGLE tracked as CVE-2026-19157. Five additional Critical Use After Free flaws were patched in WebGL, Aura, Skia, and Views components. The remaining 35 vulnerabilities received a High severity rating. Google plans a gradual rollout of the update over the coming days and weeks.
Weekly Roundup: Critical Vulnerabilities Hit VMware ESX, FortiOS, Chrome, fastjson, Cisco FMC and Ruby on Rails
Security NEXT published its list of the ten most-read articles for the week of July 26 to August 1, 2026. The ranking is dominated by high-severity vulnerabilities affecting widely deployed enterprise platforms. VMware released fixes for serious flaws in ESX and vCenter, while Fortinet confirmed active exploitation of vulnerabilities in FortiOS and VeloCloud Orchestrator. Google patched 370 security issues in Chrome, and a data-conversion library fastjson was found vulnerable with observed attacks. Apple shipped iOS 26.6 and iPadOS 26.6 containing fixes for 87 vulnerabilities, and Cisco warned that its Firewall Management Center is already being exploited. Additional patches addressed OpenAM, Node.js, and a critical flaw dubbed KindaRails2Shell in Ruby on Rails. The list also includes a breach at an ANA Group e-commerce site that may have exposed customer data.
Google Releases Chrome Security Update Fixing 370 Vulnerabilities Including Seven Critical Issues
Google has issued a major security update for Chrome that addresses a total of 370 vulnerabilities across Windows, macOS, and Linux platforms. The update covers Chrome versions 151.0.7922.72 and 151.0.7922.71 and includes seven vulnerabilities rated Critical, the highest severity level. Among the critical flaws are multiple Use After Free issues affecting Compositing, Views, Skia, and Ozone components, plus input validation problems in Dawn and ANGLE graphics libraries and a race condition in the Updater component. In addition to the critical fixes, the release patches 71 High-severity vulnerabilities, 170 Medium-severity issues, and 122 Low-severity issues. The company plans a gradual rollout over the coming days and weeks. All listed CVEs from CVE-2026-17650 through CVE-2026-18019 have been resolved in this update.
Google Releases Fifth Chrome Security Update in July, Addressing Four High-Severity Vulnerabilities
Google has issued the fifth security update for its Chrome browser in July 2026, releasing patches for four high-severity vulnerabilities. The update, published on July 23, 2026, includes versions Chrome 150.0.7871.187 and 150.0.7871.186 for Windows and macOS, along with Chrome 150.0.7871.186 for Linux. This follows previous July updates that fixed 27 issues on July 8, 15 on July 14, 7 on July 16, and 12 on July 21. The four newly addressed flaws, reported between late May and mid-June, all carry a High severity rating. They include an out-of-bounds write vulnerability in the codec component tracked as CVE-2026-16807, plus three Use After Free issues in WebMCP (CVE-2026-16806), the Blink rendering engine (CVE-2026-16805), and input processing (CVE-2026-16804).
Weekly Roundup Highlights Critical Vulnerabilities in Zoom, nginx, SonicWall, and Microsoft Products
Security NEXT published its weekly ranking of the most-read articles for the period of July 12 to July 18, 2026. The top story covered a serious vulnerability in the Windows version of Zoom that has already been fixed in the latest release. Other high-ranking items included a cyber attack that disrupted operations at Nichirei and affected frozen food shipments, as well as Microsoft’s monthly security update addressing more than 500 vulnerabilities including zero-days. Additional widely read reports detailed multiple flaws in nginx, a zero-day issue affecting SonicWall SMA1000 series appliances, and a data exposure investigation involving a TV Asahi subsidiary. The list also featured advisories on GNU Wget SSRF flaws, privilege escalation bugs in Microsoft Defender, and 15 security fixes for Chrome including two rated critical.
Google Issues Emergency Chrome Update Patching Seven Vulnerabilities Including Three Critical Flaws
Google has released a new security update for its Chrome browser addressing seven vulnerabilities just two days after the previous patch. The update covers Windows, macOS, and Linux platforms with versions Chrome 150.0.7871.129 and 150.0.7871.128. Three of the issues, tracked as CVE-2026-15899, CVE-2026-15900, and CVE-2026-15901, received the highest severity rating of Critical and involve Use After Free flaws in CameraCapture, GPU, and Network components. Four additional High-severity vulnerabilities were also fixed, including an out-of-bounds access issue in the V8 JavaScript engine and Use After Free problems in Cast, Ozone, and Aura. The company plans to roll out the patches gradually over the coming days and weeks to all users.