Google releases Chrome 148, fixing 151 flaws with two critical CVEs

Google has released Chrome 148, which addresses 151 vulnerabilities, including 22 critical flaws. Notably, CVE-2026-9872 and CVE-2026-9873 were highlighted for their severity, with researchers earning $43,000 rewards for their discovery. The majority of the patched vulnerabilities involved use-after-free bugs, which can lead to remote code execution threats by compromising Chrome's sandbox. In addition, the update fixes 123 high-severity and six medium-severity issues.

Google has reportedly disbursed over $130,000 in bug bounty rewards for ten security flaws, emphasized a surge in vulnerability reporting attributed to enhanced AI investigation efforts. The update is rolling out across various operating systems.