Malwarebytes
Google patches Chrome after critical WebGL flaw CVE-2026-13028
Part of the CVE-2026-13028 story · since 25 Jun
- Thu 25 Jun, 02:16 UTC. SecurityOnline, first report. Chrome patches critical WebGL, Blink and Autofill flaws in update.
- Thu 25 Jun, 12:01 UTC. Malwarebytes, its first report on the story. Google patches Chrome after critical WebGL flaw CVE-2026-13028. This article, 2nd of 2.
Google has released a security update for Chrome addressing 18 vulnerabilities, including four deemed critical. The update, version 149.0.7827.196/197, will be rolled out for Windows, Mac, and Linux, with Chrome for Android also receiving a recent update. Users are advised to manually update by navigating to the 'About Chrome' section in settings if they prefer not to wait for the automatic rollout.
Notable critical vulnerabilities include two WebGL-related use-after-free flaws (CVE-2026-13028 and CVE-2026-13032) that could enable attackers to escape the browser's sandbox. Despite no current exploitation in the wild, these vulnerabilities highlight ongoing web-based attack risks.
How the story developed
2 articles from 2 outlets since 25 Jun. Quiet since 25 Jun. This was the 2nd report, 10 hours after the first.
- Thu 25 Jun, 02:16 UTC. SecurityOnline, first report. Chrome patches critical WebGL, Blink and Autofill flaws in update.
- Thu 25 Jun, 12:01 UTC. Malwarebytes, its first report on the story. Google patches Chrome after critical WebGL flaw CVE-2026-13028. This article, 2nd of 2.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 2 articles as a listHide the list
- Thu 25 JunDay 02
- Chrome patches critical WebGL, Blink and Autofill flaws in update02:16 · SecurityOnline · First report
- Google patches Chrome after critical WebGL flaw CVE-2026-1302812:01 · Malwarebytes · This article, 2nd of 2