Chrome 150.0.7871.181/.182 Patches 12 High-Severity Security Flaws

Google has pushed out a Stable channel update for Chrome Desktop, bumping the browser to version 150.0.7871.181/.182 on Windows and Mac, and 150.0.7871.181 on Linux. The rollout is reaching users in stages over the coming days and weeks. This is a security-focused release: all 12 vulnerabilities fixed are rated High severity, the highest external rating Google assigns.

What's fixed

The patched issues span a wide range of Chrome's internal components, including the V8 JavaScript engine, the ANGLE graphics layer, Skia, WebAudio, Extensions, Chromecast, certificate handling, the UI, and GPU code. The bug classes involved are typical memory-safety and input-validation issues: type confusion, out-of-bounds writes, use-after-free, integer overflow, and uninitialized memory use.

Google assigned CVE-2026-16413 through CVE-2026-16424 to this batch. A few of note:

• CVE-2026-16418 A stack buffer overflow in V8
• CVE-2026-16413 and CVE-2026-16419 Out-of-bounds issues in ANGLE
• CVE-2026-16420 Type confusion
• CVE-2026-16421 An improper implementation flaw in WebAudio

Google says there is no evidence of in-the-wild exploitation and no public proof-of-concept code for any of these flaws at time of release.

Why it matters

Twelve High-severity fixes in one release is a heavier-than-usual batch, and several of the bug classes involved (type confusion, buffer overflows, use-after-free) are the kind that have historically been chained into remote-code-execution exploits in other Chrome security releases. Since none are currently known to be exploited, there's no need to panic, but there's also no reason to delay. Chrome updates automatically in the background; users just need to relaunch the browser (via the prompt in the top-right menu or a manual restart) to pick up the fix.

Find it on UpdateStar

• Google Chrome — Product Page
• Google Chrome — Download