Google has initiated the release of Chrome version 151, targeting the mitigation of 41 security vulnerabilities, including six critical memory-safety issues. These flaws pose risks such as browser crashes, corruption of memory, and the potential for executing malicious code.
Details of the Chrome 151 Release
The new version, 151.0.7922.108/.109, is being distributed to Windows and macOS users, with Linux systems receiving version 151.0.7922.108. Google stated that the rollout would occur gradually over the coming days and weeks, advising users to update promptly once available.
Addressing Critical Memory Flaws
A significant focus of this update is on rectifying use-after-free vulnerabilities, which occur when a program continues to use memory that has already been freed. Such vulnerabilities can be exploited by attackers who may lure users to specially crafted websites.
Notably, two critical use-after-free issues impact WebGL, Chrome’s technology for rendering graphics. These are cataloged as CVE-2026-19137 and CVE-2026-19170. Additionally, issues with Chrome’s Aura UI framework, Skia graphics library, and Views interface component have been addressed.
Comprehensive Vulnerability Patching
In addition to the critical issues, Google has resolved CVE-2026-19157, an out-of-bounds write vulnerability in ANGLE, Chrome’s graphics translation layer. Furthermore, 35 high-severity vulnerabilities affecting various browser components are patched, including the V8 JavaScript engine, GPU process, HTML renderer, and more.
The update addresses a spectrum of memory-related issues, such as heap buffer overflows, out-of-bounds writes, and uninitialized memory usage, enhancing overall browser security.
Importance of Immediate Updates
Given that browsers handle untrusted data from diverse web sources, these updates are crucial. Externally reported issues include an insufficient validation flaw in Contextual Tasks (CVE-2026-19169), for which Google awarded $5,000 to researcher Sven Dysthe. Contributions from OpenAI Codex Security, Hap Security, and QED Audit were also recognized.
Details of the vulnerabilities and proof-of-concept information remain undisclosed until a majority of users have updated, minimizing the risk of exploitation. Users can update Chrome via the browser menu under Help > About Google Chrome, which will initiate the download and prompt a relaunch.
Organizations are advised to prioritize the deployment of Chrome 151 across managed environments to mitigate exposure to these vulnerabilities.
