Chrome 146 Update - Patches High-Severity Vulnerabilities
Basically, Google fixed serious bugs in Chrome that could be exploited by attackers.
Google's latest Chrome 146 update fixes eight serious vulnerabilities. Users across all platforms must update immediately to avoid potential attacks. Delaying updates could expose sensitive data.
What Happened
On March 23, 2026, Google released the Chrome 146 update, addressing eight high-severity memory safety vulnerabilities. Among these flaws is CVE-2026-4673, a heap buffer overflow in WebAudio, which earned a researcher a $7,000 bug bounty. Another critical issue, CVE-2026-4674, involves an out-of-bounds read bug in CSS. These vulnerabilities pose significant risks, as they can be exploited by attackers to compromise user security.
The update also includes fixes for a heap buffer overflow in WebGL (CVE-2026-4675) and three use-after-free vulnerabilities in various components. These vulnerabilities highlight the ongoing challenges in maintaining browser security, especially as new threats emerge.
Who's Affected
The vulnerabilities affect users of Chrome across multiple platforms, including Windows, macOS, and Linux. With millions of users globally, the potential impact is substantial. Users who do not update their browsers may find themselves at risk of exploitation, especially given the nature of these vulnerabilities.
Google has not disclosed the bounty amounts for all reported vulnerabilities, which raises questions about the incentive structure for researchers. However, the focus remains on ensuring users are protected against these flaws.
What Data Was Exposed
While specific data exposure details are not disclosed, the vulnerabilities could allow attackers to execute arbitrary code or gain unauthorized access to user data. This could lead to data breaches or unauthorized actions taken on behalf of users. The nature of the vulnerabilities suggests that they could be exploited in various attack scenarios, potentially compromising sensitive information.
Users are urged to take these vulnerabilities seriously, as they can lead to significant security incidents if left unaddressed. The importance of timely updates cannot be overstated in this context.
What You Should Do
To protect yourself, it is crucial to update your Chrome browser to the latest version, 146.0.7680.164/165. This update includes all necessary patches to address the identified vulnerabilities. Regularly updating your software is a fundamental practice in cybersecurity, as it helps mitigate risks associated with known vulnerabilities.
Additionally, consider enabling automatic updates for your browser to ensure you are always running the latest version. Stay informed about security updates and vulnerabilities to maintain a proactive stance against potential threats.
SecurityWeek