ClareNow

Google Confirms 2nd Critical Chrome Security Update Within 48 Hours

In what can only be described as highly unusual circumstances, Google has released a second critical Chrome security update within just 48 hours of the first.

Davey Winder, Senior Contributor Forbes 18 Jul 2026, 06:35 2 min read 8/10

Google Confirms 2nd Critical Chrome Security Update Within 48 Hours

Key Takeaways

Google released two critical Chrome security updates within 48 hours on July 16 and July 18, 2026.
The first update patched a zero-day vulnerability (CVE-2026-XXXX) that was being actively exploited in the wild.
The second update addresses multiple high-severity flaws including remote code execution and data theft risks.
Google has not publicly disclosed full vulnerability details to prevent attacker reverse-engineering before user updates.
This is the third such emergency Chrome security update in 2026, highlighting an accelerating threat landscape.

Google has confirmed a second critical Chrome security update in just 48 hours—an unusually fast response that signals active exploitation. On July 18, Google released its second emergency security patch for Chrome within two days, urging all users to update their browsers immediately to protect against vulnerabilities that are being actively exploited. The first update, issued on July 16, patched a zero-day vulnerability tracked as CVE-2026-XXXX, which attackers had already weaponized. The second update, arriving 48 hours later, addresses additional high-severity flaws that could allow remote code execution, data theft, or system compromise. These back-to-back releases are highly unusual; Google typically spaces out security updates or bundles them into monthly stable channel releases. The company has not disclosed full technical details, a common practice to prevent attackers from reverse-engineering the fix before users have updated. Chrome's auto-update mechanism will apply the patch automatically, but users must restart the browser to complete the process. IT administrators are advised to push the update across enterprise environments as soon as possible. This unprecedented cadence underscores the pressure on Google to stay ahead of sophisticated threat actors. Security researchers note that the two updates likely address separate attack chains, possibly linked to a coordinated campaign. For the average user, the message is simple: restart Chrome now. Google expects no further emergency updates this week, but analysts warn that the current threat environment may require continued vigilance. This second critical Chrome security update in just 48 hours serves as a stark reminder that browser security is a constant battle.

Frequently Asked Questions

Google released two critical Chrome security updates in 48 hours because of active exploitation of vulnerabilities. The first update on July 16 patched a zero-day flaw that attackers were using in the wild. The second update on July 18 fixed additional high-severity issues discovered shortly after. The rapid response aims to protect users from ongoing threats.

The second Chrome update fixes multiple high-severity vulnerabilities including potential remote code execution and data theft. Google has not disclosed full technical details to prevent attackers from exploiting the information before most users update. The update is classified as critical and affects all Chrome platforms.

To update Chrome, click the three-dot menu in the top-right corner, go to Help > About Google Chrome. Chrome will automatically check for updates and begin downloading the latest patch. After the download completes, click 'Relaunch' to apply the update. You can also simply restart the browser; auto-updates are already in progress for most users.

No, it is not safe to use Chrome without the latest update. The vulnerabilities addressed by these two critical security updates are being actively exploited. Continuing to use an outdated version exposes your system to potential remote code execution, data theft, and other attacks. Update immediately by restarting your browser.

After Chrome updates, ensure the version number matches the latest stable release (Google announced the updated version on its release blog). Restart all open Chrome windows to fully apply the patch. Verify that auto-update is enabled in settings. If you manage multiple devices, push the update via administrative tools. No further action is typically required.

Emergency Chrome updates, known as out-of-band updates, are rare. Google typically releases security patches once a month in the stable channel. However, when critical vulnerabilities are actively exploited, the company can issue urgent fixes outside the schedule. In 2026, this is the third such emergency update, indicating an elevated threat environment.

Original source

www.forbes.com

Read original

Discussion

Join the discussion

No comments yet. Be the first to share your thoughts!