You are currently viewing Google Fixes Two Critical Chrome Flaws in WebGL and Dawn — Update Your Browser
Google Chrome 151 security update

Google Fixes Two Critical Chrome Flaws in WebGL and Dawn — Update Your Browser

Google has released a new Chrome Stable channel update that addresses two critical security vulnerabilities in graphics-related components of the browser. The company is urging users to install the latest version as soon as the update becomes available for their devices.

The update brings Chrome to version 151.0.7922.169/.170 on Windows and macOS, while Linux users receive version 151.0.7922.169. Google said the rollout is being delivered gradually over the coming days and weeks.

The two critical vulnerabilities are tracked as CVE-2026-76034 and CVE-2026-76036. Both are classified as buffer overflow vulnerabilities, a type of memory-safety issue that occurs when software writes more data into a memory area than it can safely contain. Such flaws can potentially result in browser crashes, memory corruption, or, under certain circumstances, arbitrary code execution.

CVE-2026-76034 affects WebGL, the technology Chrome uses to enable interactive 2D and 3D graphics within websites. WebGL is widely used by online games, visualizations, browser-based design applications and other graphics-intensive services. Specially crafted web content could potentially be used to trigger the vulnerability.

The second critical issue, CVE-2026-76036, affects Dawn, Chromium’s implementation of the WebGPU standard. WebGPU provides websites with more direct and efficient access to graphics hardware, making security weaknesses in the component particularly important.

Google’s security team reported the WebGL vulnerability on July 15 and the Dawn flaw on July 28, 2026. The company has not released technical details, proof-of-concept code or information confirming active exploitation. Google said access to some bug reports may remain restricted until most users have installed the security fixes to prevent attackers from reverse-engineering the patches.

Overall, the Chrome 151 Stable update addresses 15 security vulnerabilities, including several additional high-severity issues involving CORS, USB, Browser, Media, GPU, ANGLE, V8, Skia and WebGL.

Google also highlighted the use of security technologies such as AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity and fuzzing tools to identify vulnerabilities during Chrome development.

Users can check for the update by opening Chrome, selecting Menu → Help → About Google Chrome. The browser will automatically check for the latest version and prompt users to relaunch Chrome after the update is installed.

Full News