Google Chrome 148 Patches 127 Security Flaws in a Major Update

Google has released Chrome 148, the latest stable version of its web browser. This release stands out for one major reason: it fixes 127 security flaws, making it a historic update. Here’s what you need to know.

Three Critical Flaws Patched in Google Chrome

This is what you would call a mountain of patches: Google fixed 127 security flaws with the release of Chrome 148. Even if it is not mentioned, I would not be surprised if Claude Mythos, or at least AI, had something to do with it... Especially since many vulnerabilities were directly reported internally by Google teams. This haul is reminiscent of what we recently saw on Mozilla Firefox’s side.

Within this large batch of vulnerabilities, not all are equal. In particular, there are three critical vulnerabilities:

• CVE-2026-7896: this integer overflow vulnerability is located in Blink, Chrome’s rendering engine. It allows an attacker to execute arbitrary code within the browser process. The researcher who discovered it received a generous reward from Google: $43,000.
• CVE-2026-7897: a use-after-free bug present in code related to mobile environments.
• CVE-2026-7898: another use-after-free flaw, this time affecting Chromoting, the component used by Chrome Remote Desktop.

These two other critical flaws were discovered by Google teams. In addition, a team of researchers called “Project WhatForLunch” earned no less than $55,000 for reporting CVE-2026-7899, an important vulnerability in the V8 JavaScript engine. This engine is very often affected by vulnerabilities, including zero-day flaws, which partly explains the size of the bounty.

The New Versions Available

For now, Google is reassuring users: the company reports no active exploitation of the vulnerabilities patched in Chrome 148.

Rollout of this new build is already underway in the stable channel:

• Linux: Chrome 148.0.7778.96
• Windows and macOS: Chrome 148.0.7778.96 or 148.0.7778.97

To force the update, go to: Settings > Help > About Google Chrome, which will trigger the download.

See this page for more information about this new release.

Florian Burnel Co-founder of IT-Connect

Systems and network engineer, co-founder of IT-Connect and Microsoft MVP "Cloud and Datacenter Management". I'd like to share my experience and discoveries through my articles. I'm a generalist with a particular interest in Microsoft solutions and scripting. Enjoy your reading.

See Full Bio