Chrome 146.0.7680.75 / .76 for macOS and Windows available
This emergency update fixes two code smuggling vulnerabilities.
Google released an emergency update for Chrome on Friday. It patches two security vulnerabilities that had been exploited on the internet.
If Chrome suddenly asked you to restart your browser overnight on Friday, it wasn't being polite, it was being urgent. Google quietly pushed out an emergency update fixing two security holes that attackers were already happily exploiting on the open internet.
The late-night patch plugs two high-risk vulnerabilities. According to Google, one of them lurks inside Chrome's Skia graphics library, where a malicious web page could trick the browser into accessing memory it shouldn't touch and potentially writing data where it absolutely doesn't belong (CVE-2026-3909). Google labels the risk as high, though it skipped publishing a CVSS score.
The second issue lives in Chrome's V8 JavaScript engine. Thanks to what Google delicately calls an inappropriate implementation, attackers could execute arbitrary code inside Chrome’s sandbox simply by getting someone to load a specially crafted web page (CVE-2026-3910). Again: high risk.
Google confirmed what security folks hate hearing most: both vulnerabilities are already being exploited in the wild. Beyond that, the company isn't saying much, no details about who’s attacking whom or how widespread the abuse might be. Classic patch first, talk later mode.
Either way, the message is simple: update Chrome immediately.
Fixed Versions
The patched releases are:
Chrome 146.0.7680.115 for Android
Chrome 146.0.7680.75 for Linux
Chrome 146.0.7680.75 / .76 for macOS and Windows
Android users will eventually get the update through the Play Store, though eventually can mean waiting while Google's rollout crawls along. On Linux, you'll likely need to fire up your distribution’s software manager and check manually. Windows and macOS users can open Chrome's menu (the three dots next to the address bar), head to Help → About Google Chrome, and install the update if it's available.
Only two days ago, Google's regular Chrome update for the new 146 branch already fixed 29 vulnerabilities, including one rated critical.
about author
