CERT-FR: Multiple vulnerabilities in Google Chrome fixed in 156.0.8078.79/80 (20 CVEs)
The French CERT-FR published advisory CERTFR-2026-AVI-1422 on multiple vulnerabilities in Google Chrome, based on the Google stable channel bulletin of 29 October 2026. The advisory says the flaws allow an attacker to cause a security issue that the vendor has not specified. It lists 20 CVEs, from CVE-2026-119260 to CVE-2026-119272 and from CVE-2026-76024 to CVE-2026-76031. It gives no CVSS scores, no technical details and no mention of exploitation in the wild.
Entenda a falha
A vulnerabilidade
CERT-FR advisory CERTFR-2026-AVI-1422, based on Google's stable channel bulletin of 29 October 2026, covers 20 CVEs in Google Chrome: CVE-2026-119260 to CVE-2026-119272 and CVE-2026-76024 to CVE-2026-76031. The vendor has not specified the impact, the components or the severity of any of them, and the advisory gives no CVSS scores. Affected are Chrome versions before 156.0.8078.79 on Linux and Windows and before 156.0.8078.80 on Mac. Fixed versions are 156.0.8078.79 (Linux, Windows) and 156.0.8078.80 (Mac). The articles do not say what an attacker needs or gets, and they do not mention exploitation in the wild.
Como foi descoberta
The articles do not say how these flaws were found or who reported them. The only disclosure channel described is Google's Chrome stable channel bulletin of 29 October 2026, which CERT-FR republished as an advisory on 30 October 2026. CERT-FR says the flaws let an attacker cause a security issue not specified by the vendor.
Explicação gerada por IA a partir da matéria e dos artigos, em 02/11/2026 12:25.
Detalhes técnicos
- Affected: Chrome versions prior to 156.0.8078.79 on Linux and Windows, and prior to 156.0.8078.80 on Mac.
- Impact: not specified by the vendor.
- CVEs referenced: CVE-2026-119260 to CVE-2026-119272 and CVE-2026-76024 to CVE-2026-76031.
Remediação
- Update Chrome to 156.0.8078.79 or later on Linux and Windows, and to 156.0.8078.80 or later on Mac, as described in the Google Chrome security bulletin of 29 October 2026.
Linha do tempo
-
CERT-FR: Multiple vulnerabilities in Google Chrome fixed in 156.0.8078.79/80 (20 CVEs)
ler a análise desta fonte ocultar
The French CERT-FR published advisory CERTFR-2026-AVI-1422 on multiple vulnerabilities in Google Chrome, based on the Google stable channel bulletin of 29 October 2026. The advisory says the flaws allow an attacker to cause a security issue that the vendor has not specified. It lists 20 CVEs, from CVE-2026-119260 to CVE-2026-119272 and from CVE-2026-76024 to CVE-2026-76031. It gives no CVSS scores, no technical details and no mention of exploitation in the wild.
Technical Details
- Affected: Chrome versions prior to 156.0.8078.79 on Linux and Windows, and prior to 156.0.8078.80 on Mac.
- Impact: not specified by the vendor.
- CVEs referenced: CVE-2026-119260 to CVE-2026-119272 and CVE-2026-76024 to CVE-2026-76031.
Remediation
- Update Chrome to 156.0.8078.79 or later on Linux and Windows, and to 156.0.8078.80 or later on Mac, as described in the Google Chrome security bulletin of 29 October 2026.