Google Chrome Multiple Vulnerabilities

CSIRTS triage

What

Multiple vulnerabilities exist in Google Chrome.

Who is affected

Users of Google Chrome are affected.

Urgency

Remediation is necessary due to the potential for exploitation, though the severity is currently unknown.

Action

Update Google Chrome to the latest version.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

HKCERT Security Bulletins (HK · national-cert · site)

Severity

unknown

Published

2026-07-09

Exploitation

Not in CISA KEV at last sync

Original advisory: https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260709

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2026-151070.24% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 15% of all scored CVEs.
• Low exploitation riskCVE-2026-151080.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all scored CVEs.
• Low exploitation riskCVE-2026-151090.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 12% of all scored CVEs.
• Low exploitation riskCVE-2026-151100.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all scored CVEs.
• Low exploitation riskCVE-2026-151110.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all scored CVEs.
• Low exploitation riskCVE-2026-151120.26% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all scored CVEs.
• Low exploitation riskCVE-2026-151130.20% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 10% of all scored CVEs.
• Low exploitation riskCVE-2026-151140.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all scored CVEs.
• Low exploitation riskCVE-2026-151150.09% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 1% of all scored CVEs.
• Low exploitation riskCVE-2026-151160.24% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 15% of all scored CVEs.

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• high[NEW] [high] Google Chrome: Multiple vulnerabilitiescert-bund
• unknownMultiple vulnerabilities in Google Chrome (July 09, 2026)cert-fr-avis
• highCVE-2026-15133: Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowed a remote att…nvd
• highCVE-2026-15132: Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to …nvd
• mediumCVE-2026-15131: Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a …nvd
• mediumCVE-2026-15130: Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115 allowed…nvd
• highCVE-2026-15129: Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to …nvd
• mediumCVE-2026-15128: Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remot…nvd
• mediumCVE-2026-15127: Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a remot…nvd
• highCVE-2026-15126: Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to …nvd
• highCVE-2026-15125: Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remot…nvd
• mediumCVE-2026-15124: Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.115 allowed …nvd

More from HKCERT Security Bulletins

• unknownPalo Alto Products Multiple Vulnerabilities2026-07-09
• unknownJuniper Junos OS Multiple Vulnerabilities2026-07-09
• unknownBeyondTrust Products Multiple Vulnerabilities2026-07-08
• unknownApple Products Multiple Vulnerabilities2026-07-06
• unknownDebian Linux Kernel Multiple Vulnerabilities2026-07-06