Google Chrome 151 Update Fixes 41 Security Vulnerabilities, Including 6 Critical Flaws

Google has released Chrome version 151.0.7922.108/.109 for Windows and macOS, and version 151.0.7922.108 for Linux.

This update delivers 41 security fixes across various components of the browser, including rendering, graphics, JavaScript, user interface (UI), media, and authentication.

The Stable channel update began rolling out on August 6 and will reach users over the next several days and weeks.

Google Chrome 151 Update

The release addresses six critical-severity memory-safety vulnerabilities. Five of these are use-after-free (UAF) bugs affecting WebGL, Aura, Skia, and Views, while the sixth is an out-of-bounds write issue in ANGLE, Chrome’s graphics translation layer.

Memory-corruption vulnerabilities can be particularly severe, as a malicious website or crafted web content may trigger browser crashes, corrupt memory, or potentially allow arbitrary code execution when combined with other weaknesses.

Independent reports indicate that the update addresses over two dozen memory-safety issues classified as either critical or high severity.

Among the critical vulnerabilities are CVE-2026-19137 and CVE-2026-19170, both UAF vulnerabilities in WebGL. WebGL is a browser API used for hardware-accelerated 2D and 3D web graphics, making it a high-value target for attackers who exploit pages that process malicious graphical content. Other critical issues affect Aura (Chrome’s UI framework), Skia (its graphics library), and Views (another user interface layer).

Additionally, Google has resolved 35 high-severity issues. These include heap buffer overflows in CrashReporting and Base, multiple UAF vulnerabilities in GPU, HTML, V8, Media, Extensions, Payments, Web Authentication, and Skia, as well as integer-overflow issues in GPU and V8.

The patch set also addresses insufficient validation of untrusted input in WebAPKs, Workers, Codecs, UI, and Contextual Tasks.

V8-related problems deserve particular attention because V8 processes JavaScript and WebAssembly. This release fixes inappropriate implementation bugs, a UAF issue, an out-of-bounds write, and an integer overflow in the engine.

Attackers often target browser scripting engines, as successful exploitation can provide an initial foothold in the renderer process before attempting to escape the sandbox or escalate privileges.

Google has kept some bug reports restricted while the update is being propagated, using a common defensive strategy designed to reduce the risk of opportunistic exploitation before users are able to install the patch.

Organizations should prioritize deploying this update on endpoints that access untrusted websites, support sensitive workflows, or use GPU-accelerated web applications.

Administrators can verify the installed version by navigating to the Chrome menu → Help → About Google Chrome. Managed environments should ensure that Windows and macOS devices receive versions 151.0.7922.108/.109, while Linux systems should have version 151.0.7922.108.

Chrome 151 CVE Table

Stop new phishing & malware before they compromise your business. Integrate live intel from 15K SOCs around the world