GOOGLE has released Chrome 149, addressing a record 429 vulnerabilities, significantly outpacing prior security fixes. Over 100 of these were marked as critical or high-severity, primarily involving use-after-free and insufficient validation flaws. The most critical vulnerability, CVE-2026-10881, has a CVSS score of 9.6 and allows remote code execution via crafted HTML. Bug bounties totaling approximately $208,000 were awarded to researchers for vulnerability reports, with further amounts pending. This release highlights an increase in vulnerabilities influenced by AI, along with Google adjusting its bug bounty policies.
Chrome 149 Patches 429 Vulnerabilities
CyberSIXT Evidence Panel
Article by CyberSIXT