Google Chrome Security Updates – 25 June 2026

Google has released an updated Chrome version 149.0.7827.196/197 for Windows and Mac, and 149.0.7827.196 for Linux.

The addressed vulnerabilities could allow the attacker to conduct denial of service attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems via a crafted HTML page.

Sample of the addressed vulnerabilities:

1. Google Chrome Use After Free in WebGL Vulnerability (CVE-2026-13028):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Bypass Security

2. Google Chrome Use After Free in Blink Vulnerability (CVE-2026-13031):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Remote Code Execution
Vulnerabilities
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Updates

References