Google has released a new security update for Chrome that addresses several vulnerabilities.
In summary:
- PCWorld reports that Google released Chrome versions 146.0.7680.164/165 for desktop and 146.0.76380.164 for Android to fix 8 high-risk security vulnerabilities.
- These flaws affect critical components including WebAudio, CSS, WebGL, WebGPU, and Fonts, involving buffer overflows and use-after-free issues.
- Users should update immediately via ‘Help > About Google Chrome’ as these vulnerabilities pose significant security risks, though they’re not currently being exploited.
In the new Chrome versions 146.0.7680.164/165 for Windows and macOS and 146.0.7680.164 for Linux, the developers have fixed 8 security vulnerabilities. According to Google, none of them are being exploited in the wild yet. The release of Chrome’s next version 147 is scheduled for late March or early April.
In the Chrome Releases blog post, Srinivas Sista lists the security vulnerabilities that have been fixed. They were predominantly discovered by external security researchers and reported to Google. Unlike last year, internally discovered vulnerabilities are also now documented.
All 8 vulnerabilities (CVE-2026-4673 to CVE-2026-4680) are classified as high risk. They include a diverse mix of buffer overflows, use-after-free vulnerabilities, and other unauthorized memory accesses. The WebAudio component is affected twice while CSS, WebGL, WebGPU, and Fonts are further affected software modules.
As a rule, automatically Chrome updates when a new version is available. You can manually initiate the update check via the menu item Help > About Google Chrome.
Google has also released Chrome for Android version 146.0.76380.164. The Android version addresses the same vulnerabilities as the desktop versions. The Extended Stable Channel for Windows and macOS now includes Chromium version 146.0.7680.165.