Google releases emergency update for Chrome to fix remote code execution flaws

    Categories: News (EN)
Google Chrome

Google Chrome - Gargantiopa/shutterstock.com

Users of the most popular browser in the world should pay attention to a new security update released by Google this week. The company acted quickly to fix multiple vulnerabilities identified in the desktop and mobile operating system versions, some classified as critical for allowing malicious third parties to take control of devices remotely. Preventive action seeks to close gateways that could compromise the integrity of personal and corporate data on a large scale.

The fixes address structural problems in the software’s code, ranging from memory management flaws to logical errors in graphics processing libraries. The urgency of the package is justified by the destructive potential of the loopholes, which could be exploited without the need for complex downloads by the victim, simply by accessing a compromised web page to activate the malicious code.

Mapping of faults and affected components

The Google engineering team detailed that the security package resolves a number of Vulnerabilidades and Exposições Comuns registrations (CVEs). The main focus was on errors that enable arbitrary code execution, one of the most severe categories in current cybersecurity. Entre the problems mitigated include “integer overflow” failures and inadequate management of the life cycle of objects in the system’s memory.

To ensure transparency and alert the technical community, the main corrections implemented in this version were listed:

  • CVE-2026-3536:Correção of an integer overflow in the ANGLE component, essential for graphics rendering.
  • CVE-2026-3537:Solução for issues in the lifecycle of PowerVR objects, preventing improper memory manipulation.
  • CVE-2026-3538:Ajuste in the graphics library Skia, also related to integer overflow that could confuse the system.
  • CVE-2026-3540:Reparo in the WebAudio implementation, avoiding errors in sound processing.
  • CVE-2026-3543:Reforço in the security of the V8 engine, responsible for JavaScript processing and the heart of the browser.

In addition to these, other high severity vulnerabilities were addressed, including issues in DevTools and WebAssembly. The comprehensiveness of the update demonstrates a continued effort to maintain the browser’s robustness in the face of increasingly sophisticated attack techniques.

Verification and update procedures

Although Google Chrome has mechanisms for automatic background updating, it is recommended that users manually check whether the new version is already operational. For Nos computers with Para to hold the conference, simply access the settings menu, select “Help” and click on “About Google Chrome”.

In the mobile environment, specifically for Android devices, the corrected version also follows the numbering 145.0.7632.159. The update must be managed through the official app store, ensuring that the download comes from a trusted source. Manter up-to-date software is the first line of defense against cybercriminals seeking to exploit loopholes in outdated systems.