Google Fixes Two Critical Chrome Flaws in WebGL and Dawn — Update Your Browser
By Abinaya
Published: Wed, 19 Aug 2026 09:06:19 +0000
Tags: Chrome, Cyber Security News, Vulnerability News, cyber security, cyber security news
Google has released a new Chrome Stable channel update that fixes two critical security vulnerabilities affecting graphics-related components. Users should update their browsers as soon as the release becomes available for their device.
The update moves Chrome to version 151.0.7922.169/.170 on Windows and macOS, while Linux users receive version 151.0.7922.169. Google said the rollout will occur gradually over the coming days and weeks.
The two critical issues are tracked as CVE-2026-76034 and CVE-2026-76036. Both are buffer overflow vulnerabilities, a memory-safety flaw that can occur when software writes more data into a memory area than it was designed to hold.
Such bugs can lead to browser crashes, data corruption, or potentially arbitrary code execution in certain attack scenarios. CVE-2026-76034 affects WebGL, Chrome’s interface for rendering interactive 2D and 3D graphics inside websites.
Online games, visualizations, browser-based design tools, and other graphics-heavy web applications widely use WebGL. A malicious website could potentially attempt to trigger the flaw through specially crafted WebGL content.
The second issue, CVE-2026-76036, is a buffer overflow in Dawn. Dawn is Chromium’s implementation of the WebGPU standard, a newer graphics API intended to provide web applications with more direct and efficient access to graphics hardware.
Because WebGPU and related graphics components process complex data from web content, memory corruption issues in these areas can represent a significant browser security risk.
Google credited its own security team with reporting CVE-2026-76034 on July 15, 2026, and CVE-2026-76036 on July 28, 2026. The company has not publicly disclosed technical details, proof-of-concept code, or exploitation information.
It said access to bug reports may remain restricted until most Chrome users have installed the fixes, reducing the opportunity for attackers to reverse-engineer patches and weaponize the vulnerabilities.
In total, the Chrome 151 Stable release includes 15 security fixes. Google also noted that it uses memory-error detection and fuzzing technologies, including AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, and AFL, to identify security bugs during development.
| CVE ID | Severity | Vulnerability type | Affected component | Reporter | Issue ID |
|---|---|---|---|---|---|
| CVE-2026-76034 | Critical | Buffer overflow | WebGL | 534923522 | |
| CVE-2026-76036 | Critical | Buffer overflow | Dawn | 540087398 | |
| CVE-2026-76033 | High | Inappropriate implementation | CORS | 516715010 | |
| CVE-2026-76037 | High | Link following | CredentialProvider | 517612295 | |
| CVE-2026-76044 | High | Race condition | USB | 522732244 | |
| CVE-2026-76039 | High | Incorrect reference resolution | Core | 525167753 | |
| CVE-2026-76040 | High | Use-after-free | Browser | 534862220 | |
| CVE-2026-76035 | High | Inappropriate implementation | Media | 536439844 | |
| CVE-2026-76042 | High | Use of uninitialized resource | GPU | 536460270 | |
| CVE-2026-76046 | High | Buffer overflow | ANGLE | 536581050 | |
| CVE-2026-76043 | High | Incorrect calculation | V8 | Raghav Maheshwari | 539350801 |
| CVE-2026-76041 | High | Information leak | Skia | 540027341 | |
| CVE-2026-76047 | High | Type confusion | V8 | ywatanabee | 541251902 |
| CVE-2026-76038 | High | Type confusion | V8 | un3xploitable && GF | 541926503 |
| CVE-2026-76045 | High | Use-after-free | WebGL | OpenAI Codex Security (amyb) | 543082390 |
Users can update Chrome by opening the browser menu, selecting Help, then About Google Chrome. Chrome will automatically check for the latest available build and prompt users to relaunch once the update has downloaded.
Organizations should ensure managed Windows, macOS, and Linux endpoints receive the new Chrome version through their normal patch-management process.
Security teams should also monitor browser version compliance, particularly on systems that regularly access untrusted websites or use web-based graphics applications.
Google’s published release notes identify the affected builds and confirm that the update contains 15 security fixes, including two critical buffer overflow vulnerabilities in WebGL and Dawn.
Strengthen Your SOC by Accelerating Threat Detection & Rapid Investigations. -> Integrate ANY.RUN With Your SOC Now.
The post Google Fixes Two Critical Chrome Flaws in WebGL and Dawn — Update Your Browser appeared first on Cyber Security News.
Source — cybersecnews
Read Full Article
Published: Wed, 19 Aug 2026 09:06:19 +0000
Category — CYBER
Region: cybersecnews | Section: CYBER
Related: cyber • cybersecnews • chrome • cyber-security-news • vulnerability-news