Chrome Releases: Stable Channel Update for Desktop

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publisherchromereleases.googleblog.com

Article IDNo stable ID in source URL

Verified snapshot26 Sept 2026, 20:28 UTC

Linked CVEs15

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-76034Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
CVE-2026-76036Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
CVE-2026-76037Google Chrome: Improper Link Resolution Before File Access ('Link Following')
CVE-2026-76044Google Chrome: Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-76040Google Chrome: Use After Free
CVE-2026-76035Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
CVE-2026-76046Google Chrome: Heap-based Buffer Overflow
CVE-2026-76043Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
CVE-2026-76047Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
CVE-2026-76038Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
CVE-2026-76045Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
CVE-2026-76033Google Chrome: Improper Input Validation
CVE-2026-76039Google Chrome: Use of Incorrectly-Resolved Name or Reference
CVE-2026-76042Google Chrome: Use of Uninitialized Resource
CVE-2026-76041Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page

Source and provenance

Original title: Chrome Releases: Stable Channel Update for Desktop. Captured 26 Sept 2026, 20:28 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗