Google Chrome Security Update – 09 June 2026

Google has released an updated Chrome version 149.0.7827.102/.103 for Windows and Mac, and 149.0.7827.102 for Linux.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, memory corruption, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Google Chrome Use-After-Free in Gamepad Vulnerability (CVE-2026-11634):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Bypass Security

2. Google Chrome Use-After-Free in Network Vulnerability (CVE-2026-11651):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Remote Code Execution

It should be highlighted that Google is aware that the vulnerability “CVE-2026- 11645” is being actively exploited in the wild.

Vulnerabilities
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Update

References