Chrome 147 Patches 60 Vulnerabilities, Two Critical Flaws

What Happened

Google recently released Chrome 147, which includes patches for 60 vulnerabilities. Among these, two critical flaws were identified in the browser's WebML component. These vulnerabilities, reported by anonymous researchers, are a heap buffer overflow (CVE-2026-5858) and an integer overflow (CVE-2026-5859). Each researcher was rewarded with $43,000 for their findings, indicating the severity of the issues.

What's at Risk

The critical vulnerabilities could potentially allow attackers to exploit them for sandbox escapes or remote code execution. This means that if successfully exploited, an attacker could run malicious code on a user's machine, leading to significant security breaches. In addition to the critical flaws, Chrome 147 addresses 14 high-severity vulnerabilities affecting various components, including WebRTC, V8, WebAudio, and Blink.

Patch Status

Google has patched these vulnerabilities, but it's crucial for users to update their browsers to the latest version to ensure they are protected. The company has also rolled out new session cookie protections to further enhance security against account compromises via stolen authentication cookies.

Immediate Actions

Users are encouraged to:

• Update Chrome to the latest version immediately.
• Regularly check for updates to ensure ongoing protection against vulnerabilities.
• Be cautious of suspicious links and downloads that could exploit these vulnerabilities.

Conclusion

With the release of Chrome 147, Google has taken significant steps to address critical security flaws that could jeopardize user safety. Staying updated and vigilant is essential to maintain security in an increasingly complex digital landscape.