CERT-FR advisory CERTFR-2026-AVI-1398: 50+ vulnerabilities patched in Google Chrome stable channel
CERT-FR issued advisory CERTFR-2026-AVI-1398 on 28 October 2026 relaying the Google Chrome stable channel update of 27 October 2026. More than fifty CVEs (CVE-2026-118304 through CVE-2026-118359) are addressed, with impacts described by the vendor as unspecified. Affected are Chrome versions prior to 156.0.8078.73 on Linux and Windows and prior to 156.0.8078.74 on macOS. No active exploitation is mentioned in the advisory.
Entenda a falha
A vulnerabilidade
CERT-FR advisory CERTFR-2026-AVI-1398 relays Google's Chrome stable channel update of 27 October 2026, which fixes more than fifty CVEs (CVE-2026-118304 to CVE-2026-118322 and CVE-2026-118327 to CVE-2026-118359). The vendor does not specify the impact, component, or attacker requirements, and the articles give no severity ranking. Affected: Chrome before 156.0.8078.73 on Linux and Windows, and before 156.0.8078.74 on macOS. Those builds contain the fixes. The advisory mentions no active exploitation.
Como foi descoberta
CERT-FR published the advisory on 28 October 2026, based on Google's Chrome security bulletin of 27 October 2026. The articles do not say who found the flaws or how they were reported. CERT-FR only states that multiple vulnerabilities were discovered and that the vendor did not specify their impact. Disclosure came through the vendor's stable channel release notes.
Explicação gerada por IA a partir da matéria e dos artigos, em 29/10/2026 13:26.
Remediação
- Update Google Chrome to 156.0.8078.73 (Linux/Windows) or 156.0.8078.74 (macOS) and restart the browser.
- Chromium-based browsers should be updated once their vendors ship the corresponding builds.
Linha do tempo
-
CERT-FR advisory CERTFR-2026-AVI-1398: 50+ vulnerabilities patched in Google Chrome stable channel
ler a análise desta fonte ocultar
CERT-FR issued advisory CERTFR-2026-AVI-1398 on 28 October 2026 relaying the Google Chrome stable channel update of 27 October 2026. More than fifty CVEs (CVE-2026-118304 through CVE-2026-118359) are addressed, with impacts described by the vendor as unspecified. Affected are Chrome versions prior to 156.0.8078.73 on Linux and Windows and prior to 156.0.8078.74 on macOS. No active exploitation is mentioned in the advisory.
Remediation
- Update Google Chrome to 156.0.8078.73 (Linux/Windows) or 156.0.8078.74 (macOS) and restart the browser.
- Chromium-based browsers should be updated once their vendors ship the corresponding builds.