Google Chrome Dev (EXE) 149.0.7779.3
Google Chrome Dev (EXE) 149.0.7779.3, released April 9, 2026, fixes 287 CVEs in Google Chrome Dev (EXE). None of them is reported as exploited. Patch Radar priority: Urgent. The latest Google Chrome Dev (EXE) is 159.0.8144.0, which also fixes every one of these CVEs.
Superseded. The latest Google Chrome Dev (EXE) is 159.0.8144.0, which also fixes every CVE on this page. Install that instead.
Priority of the 287 CVEs
Applies to
| Product | Version |
|---|---|
| Google Chrome Dev (EXE) | 149.0.7779.3 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-9891 | Chromium: CVE-2026-9891 Use after free in Extensions | 9.0 | 0.0025 | None reported |
| Urgent | CVE-2026-9918 | Chromium: CVE-2026-9918 Inappropriate implementation in Tint | 9.6 | 0.0024 | None reported |
| Urgent | CVE-2026-9967 | Chromium: CVE-2026-9967 Out of bounds write in GPU | 9.6 | 0.0024 | None reported |
| Urgent | CVE-2026-8511 | Chromium: CVE-2026-8511 Use after free in UI | 9.6 | 0.0023 | None reported |
| Urgent | CVE-2026-9874 | Chromium: CVE-2026-9874 Use after free in Dawn | 9.6 | 0.0023 | None reported |
| Urgent | CVE-2026-7908 | Chromium: CVE-2026-7908 Use after free in Fullscreen | 9.6 | 0.0022 | None reported |
| Urgent | CVE-2026-7910 | Chromium: CVE-2026-7910 Use after free in Views | 9.6 | 0.0022 | None reported |
| Urgent | CVE-2026-8580 | Chromium: CVE-2026-8580 Use after free in Mojo | 9.6 | 0.0021 | None reported |
| High | CVE-2026-8510 | Chromium: CVE-2026-8510 Integer overflow in Skia | 9.6 | 0.0995 | None reported |
| High | CVE-2026-9111 | Chromium: CVE-2026-9111 Use after free in WebRTC | 8.8 | 0.0080 | None reported |
| High | CVE-2026-9119 | Chromium: CVE-2026-9119 Heap buffer overflow in WebRTC | 8.8 | 0.0054 | None reported |
| High | CVE-2026-9120 | Chromium: CVE-2026-9120 Use after free in WebRTC | 8.8 | 0.0050 | None reported |
| High | CVE-2026-9893 | Chromium: CVE-2026-9893 Use after free in Skia | 9.6 | 0.0044 | None reported |
| High | CVE-2026-9939 | Chromium: CVE-2026-9939 Heap buffer overflow in WebCodecs | 8.8 | 0.0041 | None reported |
| High | CVE-2026-8509 | Chromium: CVE-2026-8509 Heap buffer overflow in WebML | 8.8 | 0.0040 | None reported |
| High | CVE-2026-9112 | Chromium: CVE-2026-9112 Use after free in GPU | 8.8 | 0.0040 | None reported |
| High | CVE-2026-9118 | Chromium: CVE-2026-9118 Use after free in XR | 8.8 | 0.0040 | None reported |
| High | CVE-2026-9126 | Chromium: CVE-2026-9124 Insufficient validation of untrusted input in Input | 8.8 | 0.0040 | None reported |
| High | CVE-2026-7951 | Chromium: CVE-2026-7951 Out of bounds write in WebRTC | 8.8 | 0.0038 | None reported |
| High | CVE-2026-8524 | Chromium: CVE-2026-8524 Out of bounds write in WebAudio | 8.8 | 0.0038 | None reported |
| High | CVE-2026-8526 | Chromium: CVE-2026-8526 Out of bounds write in WebRTC | 8.8 | 0.0038 | None reported |
| High | CVE-2026-9952 | Chromium: CVE-2026-9952 Use after free in WebAudio | 8.8 | 0.0038 | None reported |
| High | CVE-2026-9114 | Chromium: CVE-2026-9114 Use after free in QUIC | 8.8 | 0.0037 | None reported |
| High | CVE-2026-9962 | Chromium: CVE-2026-9962 Use after free in WebRTC | 8.8 | 0.0036 | None reported |
| High | CVE-2026-7902 | Chromium: CVE-2026-7902 Out of bounds memory access in V8 | 8.8 | 0.0034 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.