Google Chrome Multiple Vulnerabilities
CSIRTS triage
- What
- Multiple vulnerabilities exist in Google Chrome affecting various subsystems and functionality.
- Who is affected
- All users running affected versions of Google Chrome across all platforms.
- Urgency
- Multiple unspecified Chrome vulnerabilities warrant prompt patching as the attack surface is broad and exploitation likelihood is high.
- Action
- Update Google Chrome to the latest available version immediately.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Chrome
Get an email when a new Chrome advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260826
Referenced CVEs
+12 more CVEs referenced in this advisory.
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownCVE-2026-78969: Uninitialized resource in Video in Google Chrome prior to 152.0.7977.65 allowed a remote attac…nvd
- unknownCVE-2026-78968: Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacke…nvd
- unknownCVE-2026-78967: Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote atta…nvd
- unknownCVE-2026-78966: Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remo…nvd
- unknownCVE-2026-78965: Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attac…nvd
- unknownCVE-2026-78964: Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote atta…nvd
- unknownCVE-2026-78963: Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote at…nvd
- unknownCVE-2026-78962: Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attac…nvd
- unknownCVE-2026-78961: Incorrect authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attac…nvd
- unknownCVE-2026-78960: Information leak in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attack…nvd
- unknownCVE-2026-78959: Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 al…nvd
- unknownCVE-2026-78958: Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attack…nvd
More from HKCERT Security Bulletins
- unknownVeeam Backup & Replication Information Disclosure Vulnerability2026-08-26
- unknownZimbra Multiple Vulnerabilities2026-08-24
- unknownMicrosoft Edge Multiple Vulnerabilities2026-08-24
- unknownGoogle Chrome Multiple Vulnerabilities2026-08-21
- unknownSplunk Products Multiple Vulnerabilities2026-08-20