Multiple vulnerabilities in Google Chrome (August 19, 2026)

CSIRTS triage

What

Multiple unspecified security issues have been discovered in Google Chrome.

Who is affected

All Chrome users running affected versions are potentially impacted.

Urgency

Update to the latest version as soon as possible; vendor has not disclosed specific severity.

Action

Check Chrome's release notes for the latest patch version and update all Chrome installations.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

CERT-FR Avis de sécurité (FR · national-cert · site)

Severity

unknown

Published

2026-08-19

Exploitation

Not in CISA KEV at last sync

Language

Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1045/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2026-760410.33% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 26% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-760460.37% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 29% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-760390.50% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 40% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-760440.39% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 32% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-760430.45% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 37% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-760340.70% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 50% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-760350.42% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 35% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-760380.42% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 35% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-760400.51% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 41% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-760330.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 20% of all EPSS-scored CVEs.

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• high[NEW] [high] Google Chrome: Multiple Vulnerabilitiescert-bund
• unknownMicrosoft Edge Multiple Vulnerabilitieshkcert
• unknownMultiple vulnerabilities in Microsoft Edge (August 21, 2026)cert-fr-avis
• unknownDSA-6455-1 chromium - security updatedebian
• unknownGoogle Chrome Multiple Vulnerabilitieshkcert
• highCVE-2026-76047: Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to exe…nvd
• highCVE-2026-76046: Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remo…nvd
• highCVE-2026-76045: Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to …nvd
• highCVE-2026-76044: Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who h…nvd
• highCVE-2026-76043: Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker…nvd
• lowCVE-2026-76042: Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote…nvd
• mediumCVE-2026-76041: Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to…nvd

Recent advisories for Google Chrome

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

• unknownexploitedNCSC-2026-0341 [1.00] [M/H] Vulnerabilities patched in Google Chromencsc-nl · 2026-09-04
• highexploited[NEW] [high] Google Chrome: Multiple vulnerabilitiescert-bund · 2026-09-04
• high[NEW] [high] Google Chrome: Multiple Vulnerabilitiescert-bund · 2026-09-04
• high[NEW] [high] Google Chrome: Multiple Vulnerabilitiescert-bund · 2026-09-04
• unknownexploitedGoogle Chrome Multiple Vulnerabilitieshkcert · 2026-09-04
• unknownexploitedMultiple vulnerabilities in Google Chrome (September 4, 2026)cert-fr-avis · 2026-09-04

More from CERT-FR Avis de sécurité

• unknownMultiple vulnerabilities in Debian Linux kernel (September 4, 2026)2026-09-04
• unknownMultiple vulnerabilities in VMware products (September 4, 2026)2026-09-04
• unknownMultiple vulnerabilities in Microsoft Edge (September 4, 2026)2026-09-04
• unknownMultiple vulnerabilities in SUSE Linux kernel (September 4, 2026)2026-09-04
• unknownMultiple vulnerabilities in Sonicwall Network Security Manager (September 4, 2026)2026-09-04