Google has released a critical update for its Chrome browser, addressing two significant security vulnerabilities in the WebGL and Dawn components. Users are strongly advised to update their browsers promptly to mitigate potential risks.
The latest update advances Chrome to version 151.0.7922.169/.170 for Windows and macOS users, while Linux users will receive version 151.0.7922.169. The rollout is scheduled to occur gradually over the coming days and weeks.
Details of the Vulnerabilities
The two critical issues, identified as CVE-2026-76034 and CVE-2026-76036, are both buffer overflow vulnerabilities. Such flaws occur when software writes more data into a memory area than it was designed to hold, potentially leading to browser crashes, data corruption, or arbitrary code execution.
CVE-2026-76034 affects WebGL, Chrome’s interface for rendering interactive 2D and 3D graphics within websites. This technology is widely used in online games, visualizations, and browser-based design tools. A malicious website could exploit this flaw through specially crafted WebGL content.
CVE-2026-76036 pertains to a buffer overflow in Dawn, Chromium’s implementation of the WebGPU standard. WebGPU is a newer graphics API designed to provide web applications with more direct and efficient access to graphics hardware. Given that WebGPU and related graphics components process complex data from web content, memory corruption issues in these areas pose significant security risks.
Discovery and Mitigation
Google’s security team reported CVE-2026-76034 on July 15, 2026, and CVE-2026-76036 on July 28, 2026. To protect users, the company has not publicly disclosed technical details, proof-of-concept code, or exploitation information. Access to bug reports may remain restricted until most Chrome users have installed the fixes, reducing the opportunity for attackers to reverse-engineer patches and exploit the vulnerabilities.
In total, the Chrome 151 Stable release includes 15 security fixes. Google employs various memory-error detection and fuzzing technologies, such as AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, and AFL, to identify security bugs during development.
Users can update Chrome by opening the browser menu, selecting Help, then About Google Chrome. The browser will automatically check for the latest available build and prompt users to relaunch once the update has been downloaded.
Organizations should ensure that managed Windows, macOS, and Linux endpoints receive the update promptly to maintain security across their systems.
These vulnerabilities underscore the importance of regular software updates and proactive security measures. As web technologies evolve, so do the complexities and potential attack vectors. Users and organizations must remain vigilant, ensuring that their software is up-to-date and that they are aware of emerging threats in the cybersecurity landscape.
