Google patches multiple browser bugs including one that was under active exploitation — so update now

Google emphasized that immediate updating is critical, as delays increase the

Google released Chrome version 152.0.7977.82 on September 4, 2026, addressing a dozen security flaws, ten of which were rated high severity. One of the vulnerabilities was actively being exploited in the wild at the time of the patch, though Google did not disclose specific details about its use or the attackers involved. The update is part of Google’s routine effort to harden its browser against emerging threats. The fixes cover a range of issues, including memory corruption, use-after-free errors, and sandbox bypass techniques that could allow malicious websites to execute arbitrary code on a user’s device. Security researchers noted that the actively exploited flaw likely involved a race condition in Chrome’s rendering engine, enabling attackers to gain elevated privileges when users visited compromised sites.

Breaking news

Town AI Secures $108 Million Series B, Valued at $1 Billion After $55 M Pre‑SeriesApple Prepares for Major Product Launch Event on October 28Apple Releases Release Candidates for watchOS, tvOS and visionOS 27.2Apple Limits iPhone Duo and iPhone 18 Pro Max to Reservation-Only Sales in Japan and South Korea

Google emphasized that immediate updating is critical, as delays increase the risk of infection, particularly for users who do not enable automatic updates. How the Active Exploit Was Detected Google’s Threat Analysis Group identified the exploit through telemetry and anomaly detection in crash reports and behavioral patterns linked to known attack infrastructure. While the company did not name the threat actors or describe the exact attack chain, it confirmed the vulnerability was being used in targeted campaigns rather than broad, indiscriminate attacks. This suggests the exploit may have been reserved for high-value targets, such as journalists, activists, or corporate employees. The patch closes the loophole before it could be more widely adopted by cybercriminal groups. What Should Users Do Immediately? Users are urged to restart Chrome after updating to ensure all patched components are fully loaded.

The update can be accessed via Settings > Help > About Chrome

The update can be accessed via Settings > Help > About Chrome, which automatically checks for and installs the latest version. Enterprise administrators should verify that their update policies are pushing the new version across all managed devices. Google also recommends enabling Enhanced Safe Browsing for additional protection against phishing and malware-hosting sites, which often serve as delivery mechanisms for such exploits. Frequently Asked Questions Was the actively exploited bug used to steal data or install malware? Google did not specify the exact purpose of the exploit, but vulnerabilities like this are commonly used to deploy spyware, ransomware, or backdoors for long-term access. Can I still be at risk if I use another Chromium-based browser? Yes, if the flaw exists in the underlying Chromium code, other browsers like Edge, Brave, or Opera may also be affected unless they have independently issued patches.

How often does Google release emergency updates like this? While monthly updates are standard, out-of-band patches for actively exploited flaws occur several times a year, depending on threat intensity and discovery timing.