Chrome 149 Patches 429 Vulnerabilities

Key Points:

• Chrome 149 has been released, addressing a record 429 vulnerabilities, including critical and high-severity flaws.
• The most severe vulnerability, CVE-2026-10881, allows remote attackers to escape Chrome’s sandbox and potentially execute code on the underlying operating system, posing significant risks to users.
• It is recommended that all users update to Chrome 149 immediately to mitigate these vulnerabilities and enhance security.

Technical Details: CVE-2026-10881 has a CVSS score of 9.6 and is an out-of-bounds read and write vulnerability in the ANGLE graphics engine. Attackers could exploit this flaw via crafted HTML pages.

MITRE ATT&CK Techniques: None mentioned

IOCs Mentioned:

• CVE-2026-10881
• CVE-2026-10882
• CVE-2026-10883