Chrome 147 Security Update: 31 Vulnerabilities Fixed (RCE/Heap Overflow)

Chrome Stable Channel Security Update Summary Vulnerability Overview This update fixes 31 security vulnerabilities, including multiple Critical and High severity issues. The main types of problems include heap buffer overflows, use-after-free, type confusion, out-of-bounds read/write, and insufficient access control. Impact Scope Affected Platforms: Windows, Mac, Linux. Affected Versions: Chrome 147.0.7727.101/102. Severity: Includes multiple Critical severity vulnerabilities (e.g., CVE-2026-6296, 6297, 6298), which may lead to remote code execution or denial of service. Remediation Measures Upgrade Version: Users should update their Chrome browser to version 147.0.7727.101/102 as soon as possible. Phased Rollout: The Linux version will be gradually pushed over the next few days/weeks. Detailed List: All fix details can be found on the Chrome Security Page. Key Vulnerability Details (CVE List) Critical: CVE-2026-6296: ANGLE heap buffer overflow. CVE-2026-6297: Proxy use-after-free. CVE-2026-6298: Skia heap buffer overflow. CVE-2026-6299: Prerender use-after-free. CVE-2026-6358: XR use-after-free. High: CVE-2026-6359: Video use-after-free. CVE-2026-6300: CSS use-after-free. CVE-2026-6301: Turbofan type confusion. CVE-2026-6302: Video use-after-free. CVE-2026-6303: Codecs use-after-free. CVE-2026-6304: Graphite use-after-free. CVE-2026-6305/6306: PDFium heap buffer overflow. CVE-2026-6307: Turbofan type confusion. CVE-2026-6308: Media out-of-bounds read. CVE-2026-6309: Viz use-after-free. CVE-2026-6310: FileSystem use-after-free. CVE-2026-6311: Dawn use-after-free. CVE-2026-6312: Accessibility uninitialized use. CVE-2026-6313: Insufficient enforcement of Passwords policy. CVE-2026-6314: Insufficient enforcement of CORS policy. CVE-2026-6315: GPU out-of-bounds write. CVE-2026-6316: Permissions use-after-free. CVE-2026-6317: Forms use-after-free. CVE-2026-6361: PDFium heap buffer overflow. CVE-2026-6362: Codecs use-after-free. CVE-2026-6317: Cast use-after-free. Medium: CVE-2026-6363: V8 type confusion. CVE-2026-6318: Codecs use-after-free. CVE-2026-6319: Payments use-after-free. CVE-2026-6364: Skia out-of-bounds read. (Note: The page does not contain specific PoC exploit code, only vulnerability descriptions and CVE numbers.)*

Goal Reached Thanks to every supporter — we hit 100%!

Chrome 147 Security Update: 31 Vulnerabilities Fixed (RCE/Heap Overflow)