Advisories
Google Chrome Faces 20+ CVEs – Update Now to Patch Critical Vulnerabilities
The French CERT has issued an urgent alert after discovering a bundle of 20+ CVEs in Google Chrome that can be exploited to trigger unspecified security failures. Affected are all Chrome releases older than 153.0.8010.47 on Linux and Windows, and 153.0.8010.48 on macOS. The vulnerabilities were disclosed in a Google release on 15 September 2026. Immediate upgrade to the latest stable channel is mandatory to close the gaps.
The French Computer Emergency Response Team (CERT‑FR) has released an alert detailing a series of critical flaws found in Google Chrome. The vulnerabilities, numbered from CVE‑2026‑91708 to CVE‑2026‑91746, allow an attacker to trigger an unspecified security problem that could potentially lead to code execution or data compromise.
Affected Versions
- Linux and Windows: any Chrome build older than 153.0.8010.47
- macOS: any Chrome build older than 153.0.8010.48
Risk Overview
Although Google has not specified the exact impact, the nature of the flaws suggests that a remote attacker could exploit them to bypass browser security controls. The risk level is considered high until the patches are applied.
Mitigation
All users and administrators should immediately update Chrome to the latest stable release, which includes the necessary fixes. The update was rolled out on 15 September 2026 and is available through the standard update channel on all supported operating systems.
Full CVE List
- CVE‑2026‑91708
- CVE‑2026‑91709
- CVE‑2026‑91710
- CVE‑2026‑91711
- CVE‑2026‑91712
- CVE‑2026‑91713
- CVE‑2026‑91714
- CVE‑2026‑91715
- CVE‑2026‑91716
- CVE‑2026‑91717
- CVE‑2026‑91718
- CVE‑2026‑91719
- CVE‑2026‑91720
- CVE‑2026‑91721
- CVE‑2026‑91722
- CVE‑2026‑91723
- CVE‑2026‑91724
- CVE‑2026‑91725
- CVE‑2026‑91726
- CVE‑2026‑91727
- CVE‑2026‑91728
- CVE‑2026‑91729
- CVE‑2026‑91730
- CVE‑2026‑91731
- CVE‑2026‑91732
- CVE‑2026‑91733
- CVE‑2026‑91734
- CVE‑2026‑91735
- CVE‑2026‑91736
- CVE‑2026‑91737
- CVE‑2026‑91738
- CVE‑2026‑91739
- CVE‑2026‑91740
- CVE‑2026‑91741
- CVE‑2026‑91742
- CVE‑2026‑91743
- CVE‑2026‑91744
- CVE‑2026‑91745
- CVE‑2026‑91746
Related vulnerabilities
Cisco Crosswork Hardening Release: Critical CVEs Uncovered in August 2026
Cisco’s Crosswork team has rolled out a hardening update after an internal security audit revealed several critical weaknesses. Four CVEs—CVE‑2026‑20030, CVE‑2026‑20357, CVE‑2026‑20358, and CVE‑2026‑20359—were patched in the new firmware, with no workarounds available. The vulnerabilities were not known to be actively exploited, but the critical rating urges immediate action. Update your Crosswork devices now to stay protected.
Read briefing
Microsoft Unleashes 972 CVE Fixes on Patch Tuesday, Including 2 Exploited Zero‑Days and 113 Critical Flaws
Microsoft’s September 2026 Patch Tuesday update tackles 972 CVEs—two of which are actively exploited zero‑days and 113 critical vulnerabilities. The patch covers Windows, Office, and other Microsoft components, tightening defenses across the ecosystem. Security teams should apply the fixes immediately and monitor for any lingering exploitation attempts.
Read briefing
Cisco IOS XE Hardening Release Addresses 7 Critical CVEs – August 2026
Cisco’s IOS XE team rolled out a hardening update in August 2026 that patches seven critical vulnerabilities discovered during internal testing. No workarounds exist; customers should apply the latest firmware to mitigate the risks. The CVEs span multiple CWE categories and carry a Critical impact rating.
Read briefing
Cisco Hardens Secure Email Gateway with Critical Patch for Exploited SQL Injection
Cisco rolled out a hardening update for its Secure Email Gateway and Secure Email & Web Manager after an internal audit uncovered several critical flaws, including a live SQL injection exploit. The fix bundles five CVEs (CVE‑2026‑20353, 76440‑76443) into a single patch with no workarounds, demanding immediate action from customers to maintain email security.
Read briefing