Google Chrome 149 patches a record 429 vulnerabilities.
Google released Chrome 149 with fixes for 429 vulnerabilities, described as a record number for a single Chrome update. More than 100 of the flaws are critical or high severity, with many involving use-after-free bugs and insufficient validation of untrusted input. The most severe issue, CVE-2026-10881, affects the ANGLE graphics engine and could let attackers escape the Chrome sandbox through crafted HTML pages. Google paid at least $208,000 in bug bounties for reported issues, with more rewards still undisclosed. The update is rolling out for Linux, Windows, and macOS.