Google has released Chrome 151 to the Stable channel, updating the browser to version 151.0.7922.71/72 for Windows and macOS and 151.0.7922.71 for Linux. The rollout is being deployed gradually over the coming days and weeks. This release delivers 370 security fixes, addressing vulnerabilities across core browser components, graphics, networking, rendering engines, and platform-specific features. As part of Google's responsible disclosure process, detailed vulnerability information has been temporarily restricted until the majority of users have installed the update, reducing the likelihood of attackers exploiting newly disclosed flaws.

The update resolves seven critical vulnerabilities (CVE-2026-17650 through CVE-2026-17656), including multiple use-after-free flaws affecting Compositing, Views, Skia, and Ozone, as well as insufficient validation of untrusted input in the Dawn and ANGLE graphics libraries and a race condition in the Chrome Updater. These memory corruption and input validation weaknesses could potentially enable remote code execution (RCE), sandbox escapes, privilege escalation, data corruption, or browser compromise if exploited through specially crafted web content or update mechanisms.

Beyond the critical issues, Chrome 151 also fixes a large number of high-severity vulnerabilities impacting key browser components such as V8, Navigation, QUIC, Audio, Media, WebGL, and Downloads. These include dangerous bug classes such as use-after-free, out-of-bounds read/write, integer overflows, and type confusion, all of which can undermine browser security and facilitate arbitrary code execution. Additionally, the release patches medium-severity vulnerabilities across ANGLE, Autofill, DevTools, Extensions, WebXR, WebView, and Passwords, addressing issues including policy bypasses, cryptographic weaknesses, insufficient input validation, and potential data leakage or user interface spoofing.

Google attributed many of the discovered vulnerabilities to its internal security teams, which leveraged advanced automated testing technologies such as AddressSanitizer (ASan), MemorySanitizer (MSan), UndefinedBehaviorSanitizer (UBSan), Control Flow Integrity (CFI), libFuzzer, and AFL, alongside reports from external security researchers. The update also includes numerous low-severity fixes affecting Enterprise features, NFC, Bluetooth, Skia, Settings, Google Lens, Picture-in-Picture, and AI-related functionality, highlighting Chrome's broad attack surface. Given the 370 security fixes, multiple critical memory corruption vulnerabilities, and the potential for serious exploitation, organizations and individual users are strongly advised to upgrade to Chrome 151 immediately to minimize exposure to emerging threats.