CSIRT-CAN – Centro de Respuesta a Incidentes de Seguridad de Canarias

Alerta

Multiple Critical Vulnerabilities Fixed in Google Chrome 152

Google has released Chrome 152, a security update that addresses 327 vulnerabilities, including 10 classified as critical and 61 as high severity.

The critical vulnerabilities addressed include:

🔴 CVE-2026-79282 — Use-After-Free in ANGLE.

🔴 CVE-2026-79290 — Use-After-Free in Aura.

🔴 CVE-2026-79054 — Use-After-Free in Chromecast.

🔴 CVE-2026-79121 — Improper input validation in Chromecast.

🔴 CVE-2026-79224 — Use-After-Free in Chromecast.

🔴 CVE-2026-79052 — Use-After-Free in Aura.

🔴 CVE-2026-79150 — Use-After-Free in Views.

🔴 CVE-2026-78935 — Use of an uninitialized variable in Mobile.

🔴 CVE-2026-79012 — Use-After-Free in Safe Browsing.

🔴 CVE-2026-79200 — Use-After-Free in Aura.

⚠️ Some of these vulnerabilities could allow arbitrary code execution through specially crafted web content, potentially leading to the compromise of the browser and the affected system.

đź’» Affected Products

Google Chrome:

  • Windows: versions prior to 152.0.7977.65.
  • macOS: versions prior to 152.0.7977.65.
  • Linux: versions prior to 152.0.7977.64.

đź’Ą Solution

đź’Ą Update Google Chrome to version 152.0.7977.64/.65 or later, depending on the operating system.

đź’Ą Keep automatic updates enabled to ensure future security updates are installed.

đź’Ą Verify that the update has been installed correctly and that the device is running a patched version.

🛡️ Recommendations

âś… Identify affected devices.

âś… Update Google Chrome to the patched version.

âś… Verify that all devices are running an up-to-date version.

âś… Monitor for potential Indicators of Compromise (IoCs).

⚠️ If the update cannot be applied immediately, temporarily avoid accessing untrusted websites.

⚠️ Applying the security update as a priority is strongly recommended, especially on systems with Internet access.

🔎 More information