In the latest version of Chrome (version 147), Google resolves 60 vulnerabilities, including two critical ones. None of the vulnerabilities are reported to have been actively exploited.
With version 147, Google has rolled out a major security update for Chrome, fixing a total of 60 vulnerabilities. According to Google, none of these flaws are currently being exploited in the wild, but it is recommended to install the update as soon as possible.
Two critical vulnerabilities addressed
The update addresses two critical vulnerabilities in Chrome’s WebML component. These involve a buffer overflow (CVE-2026-5858) and an integer overflow (CVE-2026-5859), which could theoretically be exploited to execute code or crash systems.
In addition, fourteen high-risk vulnerabilities have been resolved. The remaining vulnerabilities consist of twenty medium-risk and twenty-four low-risk issues. In total, Google has already paid out $118,000 in bug bounties to the researchers who discovered the problems.
Limited new features
The most significant addition is the ability to sync tab groups across different devices. Other announced features, such as vertical tabs and a revamped reading mode, are not yet included in this release and will be rolled out in phases.
The update is available for Windows, macOS, Linux, Android, and iOS. Chrome typically installs updates automatically, but users can also check manually via the settings.