Linux Browser Security
The latest Linux Browser Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
Chrome CSS side-channel attack leaks sensitive data on Windows: Patch released
Google disclosed CVE-2026-14012, a medium-severity CSS side-channel vulnerability in Chrome for Windows that could allow a remote attacker to extract sensitive process memory information through a crafted HTML page. The fix is available in the latest Chrome update; all Windows users are urged to update immediately. This article explains the risk, who is affected, and how to secure your browser.
Chrome 150 Out-of-Bounds Read Fix: Why a ‘Medium’ Severity Bug Still Demands Immediate Action
Google's Chrome 150 update fixes CVE-2026-14011, a medium-severity out-of-bounds read in the SurfaceCapture component that could leak sensitive screen-shared data. While rated medium, the bug's widespread attack surface and potential for use in exploit chains make it a high-priority patch for users and enterprises alike.
Chrome 150 Emergency Update Fixes Password Manager Heap Corruption—Immediate Action Required
Google’s June 30 Chrome 150 stable update patches CVE-2026-14009, a high-severity heap corruption flaw in the password manager. All users must upgrade to version 150.0.787 or later to prevent potential credential theft or arbitrary code execution, with immediate action recommended for home users, enterprises, and developers alike.
SVG Trick Could Let Attackers Spoof Chrome’s UI — Patch Now Arrives in Version 150
Google issued a security update for Chrome 150 that patches CVE-2026-14013, a medium-severity flaw in SVG handling allowing remote UI spoofing. The update to version 150.0.7871.47 prevents attackers from mimicking Chrome’s interface, reducing the risk of credential theft and permission hijacking. Users and IT admins should apply the patch immediately.
Google Patches Chrome UI Spoofing Flaw That Could Trick Users Into Clicking Fake Buttons
Google releases Chrome 150.0.7871.47 to fix CVE-2026-14014, a UI spoofing vulnerability in the Paint component that could let attackers mimic browser dialogs. Windows users should update immediately to prevent credential theft and phishing. The article explains the flaw, its impact, and step-by-step update instructions.
Chrome 150 Patches WebRTC Race Condition Causing Cross-Origin Data Leaks on Windows
Google released Chrome 150 on June 30, 2026, fixing CVE-2026-14015, a medium-severity WebRTC race condition that could leak cross-origin data on Windows. The patch, in version 150.0.7871.47, addresses a flaw in the browser's real-time communication engine that became public via the NVD before the fix. All Windows Chrome users and IT administrators should update immediately to prevent potential data theft.
Google Chrome's Updater Has a Critical Bug—Update Before Attackers Exploit It (CVE-2026-14018)
Google patched a use-after-free vulnerability in the Chrome Updater on Windows, CVE-2026-14018, that could allow a local attacker to escalate privileges when running outdated versions of Chrome. Users should immediately update to Chrome 150.0.7871.47 or later, either through the browser's automatic updater or a manual check, to close the hole before exploitation becomes widespread.
Google Patches Chrome Password Manager Vulnerability That Could Expose Cross-Origin Data
Google released Chrome 150.0.7871.47 on June 30, 2026, to patch CVE-2026-14019, a medium-severity cross-origin data leak in the browser's password manager. The flaw could let a remote attacker extract credentials from different websites. Users should update immediately via Chrome's Help > About Google Chrome menu.
Chrome 150 Fixes Use-After-Free Flaw in Linux Display Layer
Google has patched a medium-severity use-after-free flaw (CVE-2026-14024) in Chrome's Linux Ozone layer with the release of Chrome 150. The vulnerability does not affect Windows or macOS, but Linux users and IT administrators should update immediately to mitigate risk. This analysis covers the impact, practical patch steps, and broader implications.
CVE-2026-14022: Cross-Origin Data Leak Fixed in Chrome 150 – Here's Why You Should Update
Google has patched a medium-severity vulnerability in Chrome's networking component that could allow a compromised renderer to bypass cross-origin restrictions and leak data from other websites. The fix is shipping in Chrome version 150.0.7871.47 and later. Windows users should update immediately to prevent potential data theft.
Chrome Emergency Update Closes SplitView UI Spoofing Flaw That Fooled Security Interfaces
Google has issued an emergency Chrome update to close CVE-2026-14026, a high-severity SplitView UI spoofing vulnerability. A remote attacker can craft an HTML page that, with a single user gesture, mimics Chrome’s security interfaces to trick users into granting permissions or disclosing information. The fix is in version 150.0.7871.47, and both individual and enterprise users are urged to update immediately.
Google Pushes Chrome 150.0.7871.47 to Fix GPU Sandbox Escape—Here’s What to Do
On June 30, 2026, Google released Chrome 150.0.7871.47 to patch CVE-2026-14037, a high-severity GPU process policy enforcement flaw that allows sandbox escape. Users should update immediately to prevent attackers from breaking out of the browser and executing code on their Windows, macOS, or Linux machines.
Chrome 150.0.7871.47 Plugs Use-After-Free Hole: Why Even 'Low' Severity Bugs Need Immediate Patching
Google fixed a low-severity use-after-free bug (CVE-2026-14040) in Chrome 150.0.7871.47 on June 30, 2026, but enterprises must not dismiss it—such flaws can be chained with other exploits to become high-risk. We break down the update, its real-world risks, and step-by-step actions for users and IT admins.