Google Chrome Multiple Vulnerabilities
CSIRTS triage
- What
- Multiple vulnerabilities affect Google Chrome.
- Who is affected
- All Chrome users across supported versions are affected.
- Urgency
- Multiple CVEs present; Google typically patches rapidly for widely-used browser.
- Action
- Update Google Chrome to the latest available version.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Chrome
Get an email when a new Chrome advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260902
Referenced CVEs
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[NEW] [high] Google Chrome: Multiple Vulnerabilitiescert-bund
- lowCVE-2026-84359: Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who…nvd
- mediumCVE-2026-84358: Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a r…nvd
- mediumCVE-2026-84357: Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote …nvd
- mediumCVE-2026-84356: UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote at…nvd
- lowCVE-2026-84355: Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote…nvd
- criticalCVE-2026-84354: Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote…nvd
- criticalCVE-2026-84353: Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allo…nvd
- criticalCVE-2026-84352: Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote…nvd
- highCVE-2026-84351: Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote …nvd
- highCVE-2026-84350: Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker l…nvd
- highCVE-2026-84349: Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker wh…nvd
More from HKCERT Security Bulletins
- unknownGitHub Enterprise Server Multiple Vulnerabilities2026-09-03
- unknownCisco Products Multiple Vulnerabilities2026-09-03
- unknownJenkins Multiple Vulnerabilities2026-09-03
- unknownMozilla Products Multiple Vulnerabilities2026-09-02
- unknownF5 Products Multiple Vulnerabilities2026-09-02