Loading story…
Google released a Stable Channel security update for Chrome Desktop addressing vulnerabilities affecting Windows, Mac and Linux. The Canadian Centre for Cyber Security issued advisory AV26-1006, identifying affected versions as those earlier than 155.0.8059.39/.40 on Windows and Mac and 155.0.8059.39 on Linux. Guyana’s National CIRT echoed the update guidance, and Malware News republished the Canadian advisory.
The national cybersecurity agencies recommend reviewing Google’s Stable Channel Update for Desktop notice and applying the necessary updates as they become available. Administrators should verify deployed Chrome versions across all three platforms and update affected installations. The supplied notices do not identify specific CVEs, vulnerability impacts, severity ratings or exploitation activity, so they do not establish whether any flaws are being actively exploited.
See real exploitation activity before you spend the cycle.
2 events from the most recent confirmed update back to the earliest known activity.
The Canadian Centre for Cyber Security issued advisory AV26-1006 covering the Chrome Desktop vulnerabilities and urged users and administrators to review Google's update notice and apply necessary updates as available. The advisory did not specify CVEs, severity ratings, or exploitation status.
On October 6, 2026, Google published a security advisory identifying vulnerabilities in Chrome's Stable Channel for Desktop. Affected versions are those before 155.0.8059.39/.40 on Windows and Mac and before 155.0.8059.39 on Linux.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcecyber.gc.ca
Open sourcecirt.gy
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Google released security updates for **Chrome Stable Channel on Desktop** to address vulnerabilities affecting Windows, macOS, and Linux systems. One advisory covered versions prior to **`146.0.7680.164/165`** on Windows and macOS and **`146.0.7680.164`** on Linux, with the Canadian Centre for Cyber Security urging organizations to review Google’s bulletin and deploy updates as they become available. A subsequent advisory addressed additional Chrome desktop flaws in versions prior to **`147.0.7727.55/56`** on Windows and macOS and **`147.0.7727.55`** on Linux. The Canadian Centre for Cyber Security again called on users and administrators to apply the latest browser updates promptly, underscoring continued patching activity for Chrome across supported desktop platforms.
Jun 29, 2026
Google released a **Chrome Stable Channel** security update for desktop, shipping **145.0.7632.116/117** for Windows and macOS and **144.0.7559.116** for Linux, and urged users to apply updates as they roll out. The Canadian Centre for Cyber Security echoed the guidance in advisory **AV26-159**, recommending administrators review Google’s bulletin and deploy the patched versions to address the disclosed vulnerabilities. Reporting on the release described an “emergency” update that fixes **three High-severity CVEs**, including multiple **out-of-bounds memory access** issues with potential exploitation impact (e.g., memory corruption that can contribute to remote code execution or exploit chains). The vulnerabilities highlighted include `CVE-2026-3061` (out-of-bounds read in Chrome’s **Media** component, reported by Luke Francis) and `CVE-2026-3062` (out-of-bounds read/write in **Tint** / WebGPU shader compiler, reported by Cinzinga), with the update recommended for rapid enterprise deployment due to the risk posed by unpatched browsers.
Jun 29, 2026
Google released a **Chrome Stable Channel** update for desktop (Chrome **145**) to address multiple security vulnerabilities in versions prior to `145.0.7632.45/46` (Windows/macOS) and `145.0.7632.45` (Linux), and the Canadian Centre for Cyber Security urged organizations to apply the update when available. The most severe issue reported publicly is **CVE-2026-2313**, a **use-after-free in CSS** that could enable **arbitrary code execution**; additional high-severity fixes include **CVE-2026-2314** (heap buffer overflow in *Codecs*) and **CVE-2026-2315** (inappropriate implementation in *WebGPU*), alongside several medium/low-severity issues across components such as Frames, DevTools, Ozone, File input, and Downloads. Separate from the Chrome release, the Canadian Centre for Cyber Security also published multiple vendor advisories covering unrelated vulnerability sets across enterprise infrastructure and software, including **HPE** (ProLiant/Synergy/Alletra/Aruba EdgeConnect/StoreEasy and Intel E810 controller firmware), **Intel** (multiple products), **Fortinet** (FortiOS, FortiClient Windows, FortiAuthenticator, FortiSandbox), **Dell** (SmartFabric Manager), and **IBM** (webMethods Integration, InfoSphere Information Server, Watson Discovery Cartridge, API Connect, OpenPages, and Common Cryptographic Architecture). These notices are general patch advisories and do not describe a single shared incident or exploit campaign tied to the Chrome vulnerabilities.
Jun 29, 2026