Google releases Chrome update fixing critical use-after-free vulnerabilities in Shared Tab Groups and WebGL

Google has rolled out a Chrome Stable Channel update addressing 26 security flaws, including two critical use-after-free vulnerabilities, with users urged to update promptly to safeguard sensitive workflows.

Google has issued a Chrome Stable Channel update for desktop users that fixes 26 security flaws, including two critical use-after-free vulnerabilities in Shared Tab Groups and WebGL. According to Google, the release is being pushed out gradually over the coming days and weeks, with Windows and macOS receiving version 152.0.7977.75 and Linux version 152.0.7977.76.

The most serious bug is CVE-2026-84353, a critical memory-safety flaw in Shared Tab Groups. The other critical issue, CVE-2026-84352, affects WebGL, the part of Chrome used for accelerated 2D and 3D graphics. Security researchers say use-after-free errors can result in crashes, information leaks or, in some cases, code execution if attackers can reliably exploit them.

Google has not published technical details for either critical issue and has not said whether they have been exploited in the wild. That is standard practice while updates are still spreading, since disclosure can be delayed until most users have installed the fix. The company also credited both in-house and external researchers, and said its security work relies on tools such as AddressSanitizer, MemorySanitizer, Control Flow Integrity, libFuzzer and AFL.

Beyond the two critical bugs, the patch set includes nine high-severity issues across components such as FileSystem, Skia, Omnibox, Proxy, Browser, V8, Dawn, GPU and DataTransfer, plus medium- and low-severity fixes affecting areas including WebRTC, Downloads, SiteSettings, Chromoting, TabStrip and Autofill. ZDNet and The Verge reported that users should update quickly, particularly on systems used for admin access, cloud consoles and other sensitive workflows.