151 Chrome Security Flaws, 22 Critical, Fixed In New Google Update
Google has released a Chrome update patching a large number of new security flaws: 151 in total, 22 of them rated as critical severity.
- Google's May 31, 2026 Chrome update fixes a total of 151 security vulnerabilities, breaking the previous record of 107 flaws patched in April 2026.
- 22 of the vulnerabilities are rated critical severity, the highest risk level, and could enable remote code execution or data theft.
- The patch addresses two zero-day flaws that were publicly disclosed prior to the fix, raising urgency for immediate updates.
- Chrome 126.0.6478.114 (desktop) and equivalent mobile versions are now rolling out across Windows, Mac, Linux, and Android.
- Google's bug bounty program has paid out over $3 million in 2025, encouraging researchers to find and report flaws like the 151 fixed in this update.
Google released a massive Chrome security update on May 31, 2026, fixing 151 vulnerabilities, 22 of which are rated critical severity. The update is available for all major platforms – Windows, Mac, Linux, and Android – and users are urged to install it immediately to prevent potential exploits.
Chrome receives regular security patches, but this update is notable for its sheer size: 151 flaws in one go. The previous record was set in April 2026 when Google addressed 107 vulnerabilities. The uptick reflects both the growing complexity of the browser and an increasing number of security researchers hunting for bugs. Google paid out over $3 million in bug bounties in 2025 alone, incentivizing white-hat hackers to report flaws before malicious actors find them.
According to a Forbes report by cybersecurity journalist Davey Winder, the update includes fixes for multiple types of vulnerabilities – from use-after-free and buffer overflow bugs in the V8 JavaScript engine to heap corruption issues in the GPU and audio subsystems. Among the 22 critical flaws, several could allow remote code execution, meaning an attacker could take control of a user's system simply by tricking them into visiting a malicious website. No evidence of active exploitation has been confirmed yet, but security experts warn that criminals move fast when critical patches are released, reverse-engineering fixes to develop working exploits for unpatched users.
This Chrome security flaws fixed batch also addresses two zero-day vulnerabilities that had been publicly disclosed before Google could issue a patch, a practice that increases risk for users who delay updates. Chrome's automatic update mechanism will eventually push the fix to most users, but power users and IT administrators managing enterprise deployments should prioritize manual installation.
For the average user, the message is simple: update now. Open Chrome, go to the menu (three dots) > Help > About Google Chrome. The browser will check for updates and install the latest version (currently 126.0.6478.114 on desktop). Restart the browser to complete the process. The update may cause a brief interruption, but it's a small price for protection against 151 potential attack vectors.
Looking ahead, Google is expected to continue its aggressive patching cadence as the company shifts toward a faster release cycle for Chrome. With browser-based attacks on the rise – from credential theft to ransomware delivery – the role of timely security updates has never been more critical. This update serves as a stark reminder that even the most used software is a constant target, and vigilance remains the best defense.
Frequently Asked Questions
Google fixed 151 security flaws in its Chrome update released May 31, 2026, including 22 critical severity vulnerabilities. This is the largest single Chrome security patch in recent history.
The update addresses 22 critical-severity flaws, many of which could allow remote code execution. These include use-after-free bugs in V8, heap corruption in GPU and audio components, and other memory safety issues.
Open Chrome, click the three-dot menu in the top right, go to Help > About Google Chrome. Chrome will check for updates and install the latest version. Restart the browser to apply the update.
The critical flaws could be exploited by attackers to take control of your system or steal data. With two zero-day vulnerabilities already publicly known, waiting increases risk. Updating ensures you are protected.
The update covers all major platforms: Windows, Mac, Linux, and Android. Desktop version 126.0.6478.114 and equivalent mobile versions are rolling out now.
Topics
Original source
www.forbes.com
Discussion
Join the discussion
Sign in to post a comment or reply.
No comments yet. Be the first to share your thoughts!