MDR
Solutions
Partners
About
Resources
May 5, 2026
Multiple high‑severity Chrome flaws can enable remote code execution in the browser and possible sandbox escape by an external attacker. A successful attack could provide full system compromise and support lateral movement from the initially affected endpoint.
Google Chrome
Apply vendor patch
Chrome installations on Windows, macOS and Linux running versions earlier than 147.0.7727.137/138 are exposed to multiple CVEs. Exposure applies wherever Chrome is used for user browsing or remote access functions within the organisation.
Compromise of a user workstation may expose sensitive data handled in Chrome, including business applications and webmail. An affected endpoint could be used as a pivot for further internal access, disrupting normal operations and requiring remediation.
Most CVEs arise from memory safety issues, including use‑after‑free, heap buffer overflows, and out‑of‑bounds read/write in Chrome components. Additional flaws include insufficient input validation, integer overflow, type confusion, and race conditions in supporting libraries.
Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.
Discuss Your Security ExposureExplore MDR for GoogleAssess your risk
Identify affected systems
Plan remediation
Practical, vendor-aligned guidance
Get expert support
From our 24/7 security team
Get the latest threat intelligence and security advisories from Smarttech247.
View All Threat UpdatesDownload the complete analysis, including detailed technical findings and references.
Google Chrome release notes document the patched versions and vulnerability details for these CVEs.
.jpg)