Google Chrome 149.0.7827.156
Google Chrome 149.0.7827.156, released June 16, 2026, fixes 403 CVEs in Google Chrome. One of them is being exploited (CVE-2026-11645); 1 on CISA KEV. Patch Radar priority: Patch now. The latest Google Chrome is 157.0.8103.51, which also fixes every one of these CVEs.
Superseded. The latest Google Chrome is 157.0.8103.51, which also fixes every CVE on this page. Install that instead.
Priority of the 403 CVEs
Applies to
| Product | Version |
|---|---|
| Google Chrome | 149.0.7827.156 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-11645 | Chromium: CVE-2026-11645 Out of bounds memory access in V8 | 8.8 | 0.0244 | KEVExploited |
| Urgent | CVE-2026-10886 | Chromium: CVE-2026-10886 Use after free in FileSystem | 9.6 | 0.0586 | None reported |
| Urgent | CVE-2026-10881 | Chromium: CVE-2026-10881 Out of bounds read and write in ANGLE | 9.6 | 0.0063 | None reported |
| Urgent | CVE-2026-10883 | Chromium: CVE-2026-10883 Out of bounds write in ANGLE | 9.6 | 0.0063 | None reported |
| Urgent | CVE-2026-10941 | Chromium: CVE-2026-10941 Out of bounds memory access in Skia | 9.6 | 0.0044 | None reported |
| Urgent | CVE-2026-11024 | Chromium: CVE-2026-11024 Stack buffer overflow in Skia | 9.6 | 0.0037 | None reported |
| Urgent | CVE-2026-10977 | Chromium: CVE-2026-10977 Uninitialized Use in Skia | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-10994 | Chromium: CVE-2026-10994 Uninitialized Use in ANGLE | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-10993 | Chromium: CVE-2026-10993 Heap buffer overflow in Skia | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-10907 | Chromium: CVE-2026-10907 Out of bounds write in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-10974 | Chromium: CVE-2026-10974 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-11065 | Chromium: CVE-2026-11065 Use after free in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-11088 | Chromium: CVE-2026-11088 Integer overflow in ANGLE | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-11651 | Chromium: CVE-2026-11651 Use after free in Network | 9.6 | 0.0034 | None reported |
| Urgent | CVE-2026-10931 | Chromium: CVE-2026-10931 Use after free in FileSystem | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-10983 | Chromium: CVE-2026-10983 Insufficient validation of untrusted input in Dawn | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-10979 | Chromium: CVE-2026-10979 Out of bounds read in ANGLE | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-10985 | Chromium: CVE-2026-10985 Out of bounds read in Skia | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-10930 | Chromium: CVE-2026-10930 Out of bounds read in ANGLE | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-10990 | Chromium: CVE-2026-10990 Use after free in Glic | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-11002 | Chromium: CVE-2026-11002 Use after free in Autofill | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-11043 | Chromium: CVE-2026-11043 Out of bounds write in ANGLE | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-10966 | Chromium: CVE-2026-10966 Insufficient validation of untrusted input in Codecs | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-10889 | Chromium: CVE-2026-10889 Out of bounds read in ANGLE | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-10919 | Chromium: CVE-2026-10919 Use after free in ANGLE | 9.6 | 0.0030 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.