Vulnerabilities · 220 days ago

Chrome 146 fixes eight high‑severity memory bugs

Flaws affect WebAudio, CSS, WebGL, Dawn/WebGPU, FedCM and Fonts and include buffer overflows, out‑of‑bounds reads, use‑after‑free and an integer overflow.

CVEs in this update

8 CVEs

Across Chrome, Microsoft Edge (Chromium-based).

0 critical · 8 high · 0 medium · 0 low

0 in CISA KEV · 0 with EPSS above 1%

Highest severity: CVE-2026-4673 · 8.8 HIGH

Highest EPSS: CVE-2026-4673 · 0.51%

Timeline

• Mar 24 Reported by SecurityWeek

Sources

1 source covering this story

• SecurityWeek Mar 24

  Chrome 146 Update Patches High-Severity Vulnerabilities

  The software refresh fixes eight memory safety bugs affecting seven Chrome components.

Entities

• CVE-2026-4673
• CVE-2026-4677
• CVE-2026-4674
• CVE-2026-4675

Part of the PlainSec briefing for 2026-03-25

Editions

• Briefing for 2026-03-25

Related stories

• Oracle patches critical unauthenticated RCE in Fusion Middleware
• Citrix NetScaler flaws risk memory disclosure and session mix‑up
• Unauthenticated SharePoint RCE Added to CISA KEV