In summary:
- PCWorld reports that Google released Chrome versions 145.0.7632.116/117 for desktop and 145.0.7632.120 for Android to address three high-risk security vulnerabilities.
- The vulnerabilities include memory out-of-bounds errors in media and WebGPU components, plus an inappropriate implementation issue in DevTools, though none are actively exploited.
- Users should update immediately through automatic updates or manually via Help > About Google Chrome to protect against potential security threats.
In the new Chrome versions 145.0.7632.116/117 for Windows and macOS and 145.0.7632.116 for Linux, the developers have fixed 3 newly reported security vulnerabilities. According to Google, none of these vulnerabilities are being exploited for attacks in the wild.
In the Chrome Releases blog post, Srinivas Sista lists the 3 fixed security vulnerabilities, which were all reported in February by external security researchers and are classified as high risk.
The memory out-of-bounds access error (CVE-2026-3061) is located in the media component, and another memory access error is in the WebGPU compiler’s Tint component (CVE-2026-3062). In both cases, read and/or write access to out-of-bound memory areas can lead to crashes and allow injected code to be executed. A third security vulnerability (CVE-2026-3063) described as “inappropriate implementation” was discovered in DevTools.
Google has also released Chrome for Android 145.0.7632.120. The Android version addresses the same vulnerabilities as the desktop versions. The Extended Stable Channel for Windows and macOS now includes Chromium version 144.0.7559.225.
Chrome usually updates automatically when a new version is available. You can manually trigger the update check via the menu item Help > About Google Chrome. Chrome 146 will come in early March.
This article originally appeared on our sister publication PC-WELT and was translated and localized from German.
