News · via SecurityWeek
Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical
The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues.
Chrome
Coverage tagged "Chrome".
News · via Chrome Releases
Beta Channel Update for ChromeOS / ChromeOS Flex
The Beta channel is being updated to OS version 16868.9.0 (Browser version 158.0.8127.9) for most ChromeOS devices. If you find new issues, please let us know one of the following ways: File a bug…
News · via Chrome Releases
Chrome for Android Update
Hi, everyone! We've just released Chrome 157 (157.0.8103.38) for Android. It'll become available on Google Play over the next few days.
News · via Chrome Releases
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 157 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 157.0.8103.38 (Linux)…
News · via Chrome Releases
Chrome Stable for iOS Update
Hi everyone! We've just released Chrome Stable 157 (157.0.8103.37) for iOS; it'll become available on App Store in the next few hours. This release includes stability and performance improvements.
News · via Chrome Releases
Extended Stable Update for Desktop
The Extended Stable channel has been updated to 156.0.8078.88 for Windows and Mac which will roll out over the coming days/weeks. Security changes will be updated shortly A full list of changes in…
News · via oss-security
Re: Brotli CVE-2026-111497
Posted by Alan Coopersmith on Nov 03 Google Project Zero has now published their analysis at: https://project-zero.issues.chromium.org/issues/565308158
News · via Ubuntu Security
USN-8961-1: Linux kernel vulnerabilities
Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to…
News · via Ubuntu Security
USN-8959-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
News · via Ubuntu Security
USN-8960-1: Linux kernel (OEM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
News · via Ubuntu Security
USN-8962-1: Linux kernel (Azure CVM) vulnerabilities
Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to…
News · via Security Affairs
VOLTA, the infostealer that asks an AI which victims are worth the effort
VOLTA is an AI-powered infostealer that steals personal data, then uses LLMs to assess victims’ value and rank targets for attackers. Cisco Talos has analyzed a new Windows infostealer called VOLTA…
News · via Canadian Centre for Cyber Security
Google security advisory (AV26-1109)
Serial number: AV26-1109 Date: November 2, 2026 As of October 29, 2026, Google is affected by vulnerabilities in the following product: Stable Channel Chrome for Desktop Versions prior to…
News · via Malwarebytes Labs
A week in security (October 26 – November 1)
Last week on Malwarebytes Labs: Fake PDF and search tools hijacked searches for 13.4 million Chrome users Photo ID, bank checks, face scan? The UK’s age-check options Binance hit by largest-ever…
News · via Help Net Security
Byoky: Open-source wallet for AI API keys
Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their keys for OpenAI, Anthropic, Google Gemini and other…
News · via The Hacker News
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim's stolen data by their…
News · via Debian Security
DSA-6605-1 chromium - security update
https://security-tracker.debian.org/tracker/DSA-6605-1
News · via Microsoft Security Response Center
Chromium: CVE-2026-118304 Improper input validation in SVG
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026)…
News · via Microsoft Security Response Center
Chromium: CVE-2026-118313 Use after free in Video
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026)…
News · via Microsoft Security Response Center
Chromium: CVE-2026-118311 Memory corruption in Media
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026)…