Google has released a new Chrome Stable channel update that fixes two critical security vulnerabilities affecting graphics-related components. Users should update their browsers as soon as the release becomes available for their device.

The update moves Chrome to version 151.0.7922.169/.170 on Windows and macOS, while Linux users receive version 151.0.7922.169. Google said the rollout will occur gradually over the coming days and weeks.

The two critical issues are tracked as CVE-2026-76034 and CVE-2026-76036. Both are buffer overflow vulnerabilities, a memory-safety flaw that can occur when software writes more data into a memory area than it was designed to hold.

Such bugs can lead to browser crashes, data corruption, or potentially arbitrary code execution in certain attack scenarios. CVE-2026-76034 affects WebGL, Chrome’s interface for rendering interactive 2D and 3D graphics inside websites.

Online games, visualizations, browser-based design tools, and other graphics-heavy web applications widely use WebGL. A malicious website could potentially attempt to trigger the flaw through specially crafted WebGL content.

The second issue, CVE-2026-76036, is a buffer overflow in Dawn. Dawn is Chromium’s implementation of the WebGPU standard, a newer graphics API intended to provide web applications with more direct and efficient access to graphics hardware.

Because WebGPU and related graphics components process complex data from web content, memory corruption issues in these areas can represent a significant browser security risk.

Google credited its own security team with reporting CVE-2026-76034 on July 15, 2026, and CVE-2026-76036 on July 28, 2026. The company has not publicly disclosed technical details, proof-of-concept code, or exploitation information.

It said access to bug reports may remain restricted until most Chrome users have installed the fixes, reducing the opportunity for attackers to reverse-engineer patches and weaponize the vulnerabilities.

In total, the Chrome 151 Stable release includes 15 security fixes. Google also noted that it uses memory-error detection and fuzzing technologies, including AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, and AFL, to identify security bugs during development.

CVE ID	Severity	Vulnerability type	Affected component	Reporter	Issue ID
CVE-2026-76034	Critical	Buffer overflow	WebGL	Google	534923522
CVE-2026-76036	Critical	Buffer overflow	Dawn	Google	540087398
CVE-2026-76033	High	Inappropriate implementation	CORS	Google	516715010
CVE-2026-76037	High	Link following	CredentialProvider	Google	517612295
CVE-2026-76044	High	Race condition	USB	Google	522732244
CVE-2026-76039	High	Incorrect reference resolution	Core	Google	525167753
CVE-2026-76040	High	Use-after-free	Browser	Google	534862220
CVE-2026-76035	High	Inappropriate implementation	Media	Google	536439844
CVE-2026-76042	High	Use of uninitialized resource	GPU	Google	536460270
CVE-2026-76046	High	Buffer overflow	ANGLE	Google	536581050
CVE-2026-76043	High	Incorrect calculation	V8	Raghav Maheshwari	539350801
CVE-2026-76041	High	Information leak	Skia	Google	540027341
CVE-2026-76047	High	Type confusion	V8	ywatanabee	541251902
CVE-2026-76038	High	Type confusion	V8	un3xploitable && GF	541926503
CVE-2026-76045	High	Use-after-free	WebGL	OpenAI Codex Security (amyb)	543082390

Users can update Chrome by opening the browser menu, selecting Help, then About Google Chrome. Chrome will automatically check for the latest available build and prompt users to relaunch once the update has downloaded.

Organizations should ensure managed Windows, macOS, and Linux endpoints receive the new Chrome version through their normal patch-management process.

Security teams should also monitor browser version compliance, particularly on systems that regularly access untrusted websites or use web-based graphics applications.

Google’s published release notes identify the affected builds and confirm that the update contains 15 security fixes, including two critical buffer overflow vulnerabilities in WebGL and Dawn.

Strengthen Your SOC by Accelerating Threat Detection & Rapid Investigations. -> Integrate ANY.RUN With Your SOC Now.

The post Google Fixes Two Critical Chrome Flaws in WebGL and Dawn — Update Your Browser appeared first on Cyber Security News.