If you're a Chrome user—and let's face it, most of us are—you've probably seen those update notifications pop up more than usual lately. There's a good reason.
Google just pushed two Chrome updates in two days, fixing 27 security vulnerabilities including two critical "use-after-free" memory flaws. These aren't the kind of bugs you want to ignore.
What's actually happening
The two critical vulnerabilities—tracked as CVE-2026-15112 and CVE-2026-15129—are use-after-free flaws in Chrome's Ozone and Views components. In plain English? Attackers can exploit these to run malicious code on your machine just by getting you to visit a compromised webpage. No clicking required.
Between the two updates, Google patched 13 use-after-free vulnerabilities total—2 critical, 10 high-severity, and 1 medium. The stable channel is now at version 150.0.7871.114/.115 for Windows and Mac, and 150.0.7871.114 for Linux.
Wait, there's more
This isn't even the full story. Earlier this month, Google patched CVE-2026-11645—a V8 JavaScript engine zero-day that was already being exploited in the wild. That one earned the researcher who found it a $55,000 bug bounty. It's the fifth Chrome zero-day Google has fixed in 2026 alone.
And if you're running Chrome 151, the update there fixed a staggering 382 vulnerabilities, including 15 critical ones. Most of those were discovered internally by Google's own security team.
Bottom line
This isn't scare-mongering. These vulnerabilities are real, and some are already being exploited. The fixes are out there—you just need to install them.
How to update: Click the three dots (top right) → Settings → About Chrome. If an update is available, it'll start downloading automatically. Restart your browser and you're protected.
Don't put this off. It takes two minutes, and it might save you a lot more than that.
Tags:
Technology