Cisecurity Critical Vulnerabilities in Google Chrome Expose Users to Arbitrary Code Execution
Article Content
- •Multiple critical vulnerabilities in Google Chrome could allow arbitrary code execution.
- •Affected versions include Chrome prior to 155.0.8059.39 for Windows, Mac, and Linux.
- •No active exploitation has been reported, but users are urged to update their browsers.
Multiple critical vulnerabilities have been identified in Google Chrome, with the most severe allowing for arbitrary code execution. These vulnerabilities, including CVE-2026-106382 and CVE-2026-106197, affect various Chrome versions prior to 155.0.8059.39/.40 for Windows and Mac, and prior to 155.0.8059.39 for Linux. Exploitation could enable attackers to install programs, view, change, or delete data, or create accounts with full user rights. The vulnerabilities stem from various issues, including use-after-free errors and incorrect authorization. As of now, there are no reports of these vulnerabilities being in the wild. Users are advised to update their browsers to mitigate potential risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track KillSec, Ikegami Tsushinki and CVE-2026-102322 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which versions of Chrome are affected?
Are these vulnerabilities being exploited?
What should users do to protect themselves?
Continue Reading
Chinese Spies Target AI Sector with Phishing Attacks Suspected Chinese spies spoofed an executive from Anthropic, a company focused on AI, in a phishing attack aimed at gathering sensitive information. The phishing attempt involved an invitation to a fake AI policy advisory committee, which was designed to extract confidential data from targeted individuals. MI5 has… 
Teenager Arrested as Leader of KillSec Ransomware Group in International Operation On September 30, 2026, an international law enforcement operation named Operation KillSwitch led to the arrest of a 16-year-old suspected of being the main operator of the KillSec ransomware group. This group is linked to approximately 1,000 cyberattacks worldwide since its emergence in 2024, with around 500 confirmed…