Skip to content
Critical Vulnerabilities in Chrome Desktop Update Require Immediate Attention

Critical Vulnerabilities in Chrome Desktop Update Require Immediate Attention

First seen 16 Oct 2026, 05:50 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 16, 2026 at 09:38 UTC
  • •Critical vulnerabilities in Chrome require immediate updates.
  • •CVE-2026-106358 and CVE-2026-110136 have a CVSS score of 9.6.
  • •The update rollout for Windows and Mac will take several days.

Google has released an Extended Stable update for Chrome Desktop, addressing multiple critical vulnerabilities. The update, version 152.0.7977.167, includes fixes for several CVEs, including CVE-2026-106358 and CVE-2026-110136, both rated as critical with CVSS scores of 9.6. Other high-severity vulnerabilities, such as CVE-2026-106200 and CVE-2026-106235, also received patches. Users on Windows and Mac are urged to update their browsers as the rollout will occur over the coming days. Access to detailed bug information may be restricted until a majority of users have been updated. The vulnerabilities could potentially allow for significant exploitation if not addressed promptly. The update is crucial for maintaining user security and preventing potential attacks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 1h ago How this analysis works

Timeline

2026-10-06
Multiple CVEs published
Several critical and high vulnerabilities were disclosed, including CVE-2026-106358 and CVE-2026-106200.
Chromereleases.Googleblog
2026-10-06
CVE-2026-106184 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-06
CVE-2026-106200 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-06
CVE-2026-106235 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-06
CVE-2026-106347 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-06
CVE-2026-106358 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-06
CVE-2026-106383 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
Critical CVEs patched
Google released patches for critical vulnerabilities including CVE-2026-110136 and CVE-2026-110144.
Chromereleases.Googleblog
2026-10-13
CVE-2026-110136 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-110139 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (3)

Following this threat?

Track CVE-2026-106184 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (39)

1 / 2

Common questions

What versions of Chrome are affected?
The vulnerabilities affect the Extended Stable channel for Chrome Desktop on Windows and Mac.
How critical are the vulnerabilities?
The vulnerabilities include critical CVEs with CVSS scores of 9.6, indicating a high risk of exploitation.
What should users do now?
Users should update their Chrome browsers to version 152.0.7977.167 as soon as possible.