Google Chrome Security Update – 24 May 2026

The addressed vulnerabilities could allow the attacker to perform denial of service and spoofing attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems via a crafted HTML page.

Sample of the addressed vulnerabilities:

1. Google Chrome Use After Free in WebRTC Vulnerability (CVE-2026-9111):

• CVSS: 8.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Remote Code Execution

2. Google Chrome Type Confusion in GFX Vulnerability (CVE-2026-9117):

• CVSS: 7.5
• Attack Vector: Network
• Attack Complexity: High
• Privileges Required: None
• User Interaction: Required
• Consequences: Bypass Security