{ "schema_version": "1.0", "generated_at": "2026-11-07T18:30:10Z", "last_checked": "2026-11-07T17:33:08+00:00", "agent_rules": [ "Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.", "Never install, update, uninstall or change settings without the user's clear OK for that exact step.", "Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.", "If you cannot tell whether the user is affected, say so plainly instead of guessing.", "Say 'unconfirmed' when an incident's confidence is 'unconfirmed'." ], "product": { "slug": "chrome", "name": "Google Chrome", "short_name": "Chrome", "page_url": "https://patchgap.ai/is-my-chrome-up-to-date/", "minimum_safe_version": "157.0.8103.38", "minimum_safe_version_source": [ { "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html", "title": "Chrome Releases: Stable Channel Update for Desktop (Nov 3, 2026)", "date": "2026-11-03", "kind": "vendor" } ], "baseline": { "version": "157.0.8103.38", "applies_to": "all platforms listed for this product", "source_incident": "chrome-157-nov-3-security-fixes", "sources": [ { "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html", "title": "Chrome Releases: Stable Channel Update for Desktop (Nov 3, 2026)", "date": "2026-11-03", "kind": "vendor" } ], "covers_everything_listed": false, "caveats": [ "Only partly fixed so far, so also follow the extra steps on their pages: emudhra-fake-website-certificates.", "These are fixed by an update without one version number we can compare, so check their pages: emudhra-fake-website-certificates." ], "text": "You're covered against every problem here that has a version number if you're on Chrome 157.0.8103.38 or newer." }, "update_steps": { "windows": [ "Open Chrome's three-dot menu > Help > About Google Chrome.", "Wait while it downloads the update.", "Click Relaunch." ], "macos": [ "Open Chrome's three-dot menu > Help > About Google Chrome.", "Wait while it downloads the update.", "Click Relaunch." ], "linux": [ "Open Chrome's three-dot menu > Help > About Google Chrome.", "Wait while it downloads the update.", "Click Relaunch." ] }, "last_checked": "2026-11-07T17:33:08+00:00", "vendor": "Google", "category": "browsers", "platforms": [ "windows", "macos", "linux" ], "what_it_is": "The most popular web browser.", "url": "https://patchgap.ai/is-my-chrome-up-to-date/", "json_url": "https://patchgap.ai/products/chrome.json", "official_site": "https://www.google.com/chrome/", "official_download": "https://support.google.com/chrome/answer/95414", "how_it_updates": "Chrome updates itself, but it only switches to the new version after you close and reopen it (Relaunch).", "check": { "windows": { "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.", "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version", "shell": "PowerShell", "read_only": true }, "macos": { "menu_path": "Chrome menu bar: Chrome > About Google Chrome.", "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "linux": { "menu_path": "Chrome menu: three dots > Help > About Google Chrome.", "command": "google-chrome --version", "shell": "Terminal", "read_only": true } }, "open_incidents": [ "chrome-attacked-bug-sep-2026-b", "chrome-attacked-bug-sep-2026-a", "chrome-attacked-bug-jun-2026", "chrome-attacked-bug-apr-2026", "chrome-attacked-bug-mar-2026", "chrome-attacked-bug-feb-2026", "chrome-attacked-bug-dec-2025", "chrome-attacked-bug-nov-2025", "chrome-157-nov-3-security-fixes", "chrome-156-oct-29-security-fixes", "chrome-156-oct-27-security-fixes", "chrome-156-security-fixes", "emudhra-fake-website-certificates" ] }, "incidents": [ { "id": "chrome-attacked-bug-sep-2026-b", "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b/", "path": "/incidents/chrome-attacked-bug-sep-2026-b/", "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b.json", "title": "Chrome and Edge (Sep 2026, second fix): a bug in the part that runs website code (V8) was used in real attacks", "category": "browsers", "platforms": [ "windows", "macos", "linux" ], "products": [ "chrome", "edge" ], "status": "patched", "status_label": "Patched: update now", "severity": "high", "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).", "exploited_in_wild": "yes", "exploited_note": "Google says it is aware that attacks using CVE-2026-87491 exist. CISA lists it as used in real attacks (added 2026-09-09).", "exploited_source_url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html", "confidence": "confirmed", "confidence_note": null, "first_reported": "2026-09-08", "updated_at": "2026-10-27", "cves": [ "CVE-2026-87491" ], "summary": "A bad website could use a bug in the part that runs website code (V8) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 153.0.8010.36. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.", "am_i_affected": "You are at risk if Chrome is older than 153.0.8010.36 or Edge is older than 152.0.4191.66. Newer versions are safe from this one.", "action": "Update Chrome to 153.0.8010.36 or newer and restart Edge", "affected": [ { "product": "chrome", "product_name": "Google Chrome", "platform": "windows", "affected_versions": "Chrome versions before 153.0.8010.36", "fixed_version": "153.0.8010.36 or 153.0.8010.37", "fixed_min": "153.0.8010.36", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html" ], "check": { "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.", "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version", "shell": "PowerShell", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "macos", "affected_versions": "Chrome versions before 153.0.8010.36", "fixed_version": "153.0.8010.36 or 153.0.8010.37", "fixed_min": "153.0.8010.36", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html" ], "check": { "menu_path": "Chrome menu bar: Chrome > About Google Chrome.", "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "linux", "affected_versions": "Chrome versions before 153.0.8010.36", "fixed_version": "153.0.8010.36 or 153.0.8010.37", "fixed_min": "153.0.8010.36", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html" ], "check": { "menu_path": "Chrome menu: three dots > Help > About Google Chrome.", "command": "google-chrome --version", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "windows", "affected_versions": "Edge versions before 152.0.4191.66", "fixed_version": "152.0.4191.66", "fixed_min": "152.0.4191.66", "fix_note": null, "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.", "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion", "shell": "PowerShell", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "macos", "affected_versions": "Edge versions before 152.0.4191.66", "fixed_version": "152.0.4191.66", "fixed_min": "152.0.4191.66", "fix_note": null, "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.", "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" } ], "fix_steps": [ "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.", "Click Relaunch.", "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart." ], "official_patch_links": [ { "label": "Google: update Chrome", "url": "https://support.google.com/chrome/answer/95414" }, { "label": "Google Chrome release note", "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html" }, { "label": "Microsoft Edge security release notes", "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" } ], "extra_checks": [], "sources": [ { "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html", "title": "Google Chrome Releases: Stable Channel Update for Desktop (2026-09-08)", "date": "2026-09-08", "kind": "vendor", "official": true }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-87491 (added 2026-09-09)", "date": "2026-09-09", "kind": "cisa", "official": true }, { "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security", "title": "Microsoft: Release notes for Microsoft Edge security updates", "date": "2026-09-04", "kind": "vendor", "official": true }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87491", "title": "NVD: CVE-2026-87491", "date": "2026-09-08", "kind": "nvd", "official": true } ] }, { "id": "chrome-attacked-bug-sep-2026-a", "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a/", "path": "/incidents/chrome-attacked-bug-sep-2026-a/", "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a.json", "title": "Chrome and Edge (Sep 2026, first fix): a bug in the part that runs website code (V8) was used in real attacks", "category": "browsers", "platforms": [ "windows", "macos", "linux" ], "products": [ "chrome", "edge" ], "status": "patched", "status_label": "Patched: update now", "severity": "high", "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).", "exploited_in_wild": "yes", "exploited_note": "Google says it is aware that attacks using CVE-2026-85046 exist. CISA lists it as used in real attacks (added 2026-09-04).", "exploited_source_url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html", "confidence": "confirmed", "confidence_note": null, "first_reported": "2026-09-03", "updated_at": "2026-10-27", "cves": [ "CVE-2026-85046" ], "summary": "A bad website could use a bug in the part that runs website code (V8) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 152.0.7977.82. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.", "am_i_affected": "You are at risk if Chrome is older than 152.0.7977.82 or Edge is older than 152.0.4191.62. Newer versions are safe from this one.", "action": "Update Chrome to 152.0.7977.82 or newer and restart Edge", "affected": [ { "product": "chrome", "product_name": "Google Chrome", "platform": "windows", "affected_versions": "Chrome versions before 152.0.7977.82", "fixed_version": "152.0.7977.82 or 152.0.7977.83", "fixed_min": "152.0.7977.82", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html" ], "check": { "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.", "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version", "shell": "PowerShell", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "macos", "affected_versions": "Chrome versions before 152.0.7977.82", "fixed_version": "152.0.7977.82 or 152.0.7977.83", "fixed_min": "152.0.7977.82", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html" ], "check": { "menu_path": "Chrome menu bar: Chrome > About Google Chrome.", "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "linux", "affected_versions": "Chrome versions before 152.0.7977.82", "fixed_version": "152.0.7977.82 or 152.0.7977.83", "fixed_min": "152.0.7977.82", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html" ], "check": { "menu_path": "Chrome menu: three dots > Help > About Google Chrome.", "command": "google-chrome --version", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "windows", "affected_versions": "Edge versions before 152.0.4191.62", "fixed_version": "152.0.4191.62", "fixed_min": "152.0.4191.62", "fix_note": null, "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.", "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion", "shell": "PowerShell", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "macos", "affected_versions": "Edge versions before 152.0.4191.62", "fixed_version": "152.0.4191.62", "fixed_min": "152.0.4191.62", "fix_note": null, "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.", "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" } ], "fix_steps": [ "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.", "Click Relaunch.", "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart." ], "official_patch_links": [ { "label": "Google: update Chrome", "url": "https://support.google.com/chrome/answer/95414" }, { "label": "Google Chrome release note", "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html" }, { "label": "Microsoft Edge security release notes", "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" } ], "extra_checks": [], "sources": [ { "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html", "title": "Google Chrome Releases: Stable Channel Update for Desktop (2026-09-03)", "date": "2026-09-03", "kind": "vendor", "official": true }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-85046 (added 2026-09-04)", "date": "2026-09-04", "kind": "cisa", "official": true }, { "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security", "title": "Microsoft: Release notes for Microsoft Edge security updates", "date": "2026-09-02", "kind": "vendor", "official": true }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85046", "title": "NVD: CVE-2026-85046", "date": "2026-09-03", "kind": "nvd", "official": true } ] }, { "id": "chrome-attacked-bug-jun-2026", "url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026/", "path": "/incidents/chrome-attacked-bug-jun-2026/", "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026.json", "title": "Chrome and Edge (Jun 2026): a bug in the part that runs website code (V8) was used in real attacks", "category": "browsers", "platforms": [ "windows", "macos", "linux" ], "products": [ "chrome", "edge" ], "status": "patched", "status_label": "Patched: update now", "severity": "high", "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).", "exploited_in_wild": "yes", "exploited_note": "Google says it is aware that attacks using CVE-2026-11645 exist. CISA lists it as used in real attacks (added 2026-06-09).", "exploited_source_url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html", "confidence": "confirmed", "confidence_note": null, "first_reported": "2026-06-08", "updated_at": "2026-10-27", "cves": [ "CVE-2026-11645" ], "summary": "A bad website could use a bug in the part that runs website code (V8) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 149.0.7827.102. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.", "am_i_affected": "You are at risk if Chrome is older than 149.0.7827.102 or Edge is older than 149.0.4022.69. Newer versions are safe from this one.", "action": "Update Chrome to 149.0.7827.102 or newer and restart Edge", "affected": [ { "product": "chrome", "product_name": "Google Chrome", "platform": "windows", "affected_versions": "Chrome versions before 149.0.7827.102", "fixed_version": "149.0.7827.102 or 149.0.7827.103", "fixed_min": "149.0.7827.102", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html" ], "check": { "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.", "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version", "shell": "PowerShell", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "macos", "affected_versions": "Chrome versions before 149.0.7827.102", "fixed_version": "149.0.7827.102 or 149.0.7827.103", "fixed_min": "149.0.7827.102", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html" ], "check": { "menu_path": "Chrome menu bar: Chrome > About Google Chrome.", "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "linux", "affected_versions": "Chrome versions before 149.0.7827.102", "fixed_version": "149.0.7827.102 or 149.0.7827.103", "fixed_min": "149.0.7827.102", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html" ], "check": { "menu_path": "Chrome menu: three dots > Help > About Google Chrome.", "command": "google-chrome --version", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "windows", "affected_versions": "Edge versions before 149.0.4022.69", "fixed_version": "149.0.4022.69", "fixed_min": "149.0.4022.69", "fix_note": null, "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.", "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion", "shell": "PowerShell", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "macos", "affected_versions": "Edge versions before 149.0.4022.69", "fixed_version": "149.0.4022.69", "fixed_min": "149.0.4022.69", "fix_note": null, "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.", "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" } ], "fix_steps": [ "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.", "Click Relaunch.", "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart." ], "official_patch_links": [ { "label": "Google: update Chrome", "url": "https://support.google.com/chrome/answer/95414" }, { "label": "Google Chrome release note", "url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html" }, { "label": "Microsoft Edge security release notes", "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" } ], "extra_checks": [], "sources": [ { "url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html", "title": "Google Chrome Releases: Stable Channel Update for Desktop (2026-06-08)", "date": "2026-06-08", "kind": "vendor", "official": true }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-11645 (added 2026-06-09)", "date": "2026-06-09", "kind": "cisa", "official": true }, { "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security", "title": "Microsoft: Release notes for Microsoft Edge security updates", "date": "2026-06-12", "kind": "vendor", "official": true }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11645", "title": "NVD: CVE-2026-11645", "date": "2026-06-08", "kind": "nvd", "official": true } ] }, { "id": "chrome-attacked-bug-apr-2026", "url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026/", "path": "/incidents/chrome-attacked-bug-apr-2026/", "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026.json", "title": "Chrome and Edge (Mar 2026): a bug in the part that handles 3D graphics (Dawn) was used in real attacks", "category": "browsers", "platforms": [ "windows", "macos", "linux" ], "products": [ "chrome", "edge" ], "status": "patched", "status_label": "Patched: update now", "severity": "high", "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).", "exploited_in_wild": "yes", "exploited_note": "Google says it is aware that attacks using CVE-2026-5281 exist. CISA lists it as used in real attacks (added 2026-04-01).", "exploited_source_url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html", "confidence": "confirmed", "confidence_note": null, "first_reported": "2026-03-31", "updated_at": "2026-10-27", "cves": [ "CVE-2026-5281" ], "summary": "A bad website could use a bug in the part that handles 3D graphics (Dawn) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 146.0.7680.177. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.", "am_i_affected": "You are at risk if Chrome is older than 146.0.7680.177 or Edge is older than 146.0.3856.97. Newer versions are safe from this one.", "action": "Update Chrome to 146.0.7680.177 or newer and restart Edge", "affected": [ { "product": "chrome", "product_name": "Google Chrome", "platform": "windows", "affected_versions": "Chrome versions before 146.0.7680.177", "fixed_version": "146.0.7680.177 or 146.0.7680.178", "fixed_min": "146.0.7680.177", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html" ], "check": { "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.", "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version", "shell": "PowerShell", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "macos", "affected_versions": "Chrome versions before 146.0.7680.177", "fixed_version": "146.0.7680.177 or 146.0.7680.178", "fixed_min": "146.0.7680.177", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html" ], "check": { "menu_path": "Chrome menu bar: Chrome > About Google Chrome.", "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "linux", "affected_versions": "Chrome versions before 146.0.7680.177", "fixed_version": "146.0.7680.177 or 146.0.7680.178", "fixed_min": "146.0.7680.177", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html" ], "check": { "menu_path": "Chrome menu: three dots > Help > About Google Chrome.", "command": "google-chrome --version", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "windows", "affected_versions": "Edge versions before 146.0.3856.97", "fixed_version": "146.0.3856.97", "fixed_min": "146.0.3856.97", "fix_note": null, "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.", "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion", "shell": "PowerShell", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "macos", "affected_versions": "Edge versions before 146.0.3856.97", "fixed_version": "146.0.3856.97", "fixed_min": "146.0.3856.97", "fix_note": null, "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.", "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" } ], "fix_steps": [ "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.", "Click Relaunch.", "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart." ], "official_patch_links": [ { "label": "Google: update Chrome", "url": "https://support.google.com/chrome/answer/95414" }, { "label": "Google Chrome release note", "url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html" }, { "label": "Microsoft Edge security release notes", "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" } ], "extra_checks": [], "sources": [ { "url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html", "title": "Google Chrome Releases: Stable Channel Update for Desktop (2026-03-31)", "date": "2026-03-31", "kind": "vendor", "official": true }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-5281 (added 2026-04-01)", "date": "2026-04-01", "kind": "cisa", "official": true }, { "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security", "title": "Microsoft: Release notes for Microsoft Edge security updates", "date": "2026-04-01", "kind": "vendor", "official": true }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5281", "title": "NVD: CVE-2026-5281", "date": "2026-03-31", "kind": "nvd", "official": true } ] }, { "id": "chrome-attacked-bug-mar-2026", "url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026/", "path": "/incidents/chrome-attacked-bug-mar-2026/", "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026.json", "title": "Chrome and Edge (Mar 2026): bugs in the parts that run website code (V8) and draw images (Skia) were used in real attacks", "category": "browsers", "platforms": [ "windows", "macos", "linux" ], "products": [ "chrome", "edge" ], "status": "patched", "status_label": "Patched: update now", "severity": "high", "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).", "exploited_in_wild": "yes", "exploited_note": "Google says it is aware that attacks using CVE-2026-3910, CVE-2026-3909 exist. CISA lists them as used in real attacks (added 2026-03-13).", "exploited_source_url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html", "confidence": "confirmed", "confidence_note": null, "first_reported": "2026-03-13", "updated_at": "2026-10-27", "cves": [ "CVE-2026-3910", "CVE-2026-3909" ], "summary": "A bad website could use a bug in the parts that run website code (V8) and draw images (Skia) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 146.0.7680.80. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.", "am_i_affected": "You are at risk if Chrome is older than 146.0.7680.80 or Edge is older than 146.0.3856.62. Newer versions are safe from this one.", "action": "Update Chrome to 146.0.7680.80 or newer and restart Edge", "affected": [ { "product": "chrome", "product_name": "Google Chrome", "platform": "windows", "affected_versions": "Chrome versions before 146.0.7680.80", "fixed_version": "146.0.7680.80", "fixed_min": "146.0.7680.80", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html" ], "check": { "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.", "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version", "shell": "PowerShell", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "macos", "affected_versions": "Chrome versions before 146.0.7680.80", "fixed_version": "146.0.7680.80", "fixed_min": "146.0.7680.80", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html" ], "check": { "menu_path": "Chrome menu bar: Chrome > About Google Chrome.", "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "linux", "affected_versions": "Chrome versions before 146.0.7680.80", "fixed_version": "146.0.7680.80", "fixed_min": "146.0.7680.80", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html" ], "check": { "menu_path": "Chrome menu: three dots > Help > About Google Chrome.", "command": "google-chrome --version", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "windows", "affected_versions": "Edge versions before 146.0.3856.62", "fixed_version": "146.0.3856.62", "fixed_min": "146.0.3856.62", "fix_note": null, "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.", "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion", "shell": "PowerShell", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "macos", "affected_versions": "Edge versions before 146.0.3856.62", "fixed_version": "146.0.3856.62", "fixed_min": "146.0.3856.62", "fix_note": null, "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.", "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" } ], "fix_steps": [ "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.", "Click Relaunch.", "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart." ], "official_patch_links": [ { "label": "Google: update Chrome", "url": "https://support.google.com/chrome/answer/95414" }, { "label": "Google Chrome release note", "url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html" }, { "label": "Microsoft Edge security release notes", "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" } ], "extra_checks": [], "sources": [ { "url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html", "title": "Google Chrome Releases: Stable Channel Update for Desktop (2026-03-13)", "date": "2026-03-13", "kind": "vendor", "official": true }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-3910, CVE-2026-3909 (added 2026-03-13)", "date": "2026-03-13", "kind": "cisa", "official": true }, { "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security", "title": "Microsoft: Release notes for Microsoft Edge security updates", "date": "2026-03-16", "kind": "vendor", "official": true }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3910", "title": "NVD: CVE-2026-3910", "date": "2026-03-13", "kind": "nvd", "official": true } ] }, { "id": "chrome-attacked-bug-feb-2026", "url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026/", "path": "/incidents/chrome-attacked-bug-feb-2026/", "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026.json", "title": "Chrome and Edge (Feb 2026): a bug in the part that handles page styles (CSS) was used in real attacks", "category": "browsers", "platforms": [ "windows", "macos", "linux" ], "products": [ "chrome", "edge" ], "status": "patched", "status_label": "Patched: update now", "severity": "high", "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).", "exploited_in_wild": "yes", "exploited_note": "Google says it is aware that attacks using CVE-2026-2441 exist. CISA lists it as used in real attacks (added 2026-02-17).", "exploited_source_url": "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html", "confidence": "confirmed", "confidence_note": null, "first_reported": "2026-02-13", "updated_at": "2026-10-27", "cves": [ "CVE-2026-2441" ], "summary": "A bad website could use a bug in the part that handles page styles (CSS) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 145.0.7632.75. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.", "am_i_affected": "You are at risk if Chrome is older than 145.0.7632.75 or Edge has not updated since 2026-02. Newer versions are safe from this one.", "action": "Update Chrome to 145.0.7632.75 or newer and restart Edge", "affected": [ { "product": "chrome", "product_name": "Google Chrome", "platform": "windows", "affected_versions": "Chrome versions before 145.0.7632.75", "fixed_version": "145.0.7632.75 or 145.0.7632.76", "fixed_min": "145.0.7632.75", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html" ], "check": { "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.", "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version", "shell": "PowerShell", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "macos", "affected_versions": "Chrome versions before 145.0.7632.75", "fixed_version": "145.0.7632.75 or 145.0.7632.76", "fixed_min": "145.0.7632.75", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html" ], "check": { "menu_path": "Chrome menu bar: Chrome > About Google Chrome.", "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "linux", "affected_versions": "Chrome versions before 145.0.7632.75", "fixed_version": "145.0.7632.75 or 145.0.7632.76", "fixed_min": "145.0.7632.75", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html" ], "check": { "menu_path": "Chrome menu: three dots > Help > About Google Chrome.", "command": "google-chrome --version", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "windows", "affected_versions": "Edge versions released before Microsoft's matching security update", "fixed_version": null, "fixed_min": null, "fix_note": "Microsoft's Edge security release notes list the Edge update that includes the Chromium fix for CVE-2026-2441.", "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.", "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion", "shell": "PowerShell", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "macos", "affected_versions": "Edge versions released before Microsoft's matching security update", "fixed_version": null, "fixed_min": null, "fix_note": "Microsoft's Edge security release notes list the Edge update that includes the Chromium fix for CVE-2026-2441.", "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.", "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" } ], "fix_steps": [ "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.", "Click Relaunch.", "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart." ], "official_patch_links": [ { "label": "Google: update Chrome", "url": "https://support.google.com/chrome/answer/95414" }, { "label": "Google Chrome release note", "url": "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html" }, { "label": "Microsoft Edge security release notes", "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" } ], "extra_checks": [], "sources": [ { "url": "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html", "title": "Google Chrome Releases: Stable Channel Update for Desktop (2026-02-13)", "date": "2026-02-13", "kind": "vendor", "official": true }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-2441 (added 2026-02-17)", "date": "2026-02-17", "kind": "cisa", "official": true }, { "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security", "title": "Microsoft: Release notes for Microsoft Edge security updates", "date": "2026-02-17", "kind": "vendor", "official": true }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2441", "title": "NVD: CVE-2026-2441", "date": "2026-02-13", "kind": "nvd", "official": true } ] }, { "id": "chrome-attacked-bug-dec-2025", "url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025/", "path": "/incidents/chrome-attacked-bug-dec-2025/", "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025.json", "title": "Chrome and Edge (Dec 2025): a bug in the part that draws graphics (ANGLE) was used in real attacks", "category": "browsers", "platforms": [ "windows", "macos", "linux" ], "products": [ "chrome", "edge" ], "status": "patched", "status_label": "Patched: update now", "severity": "high", "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).", "exploited_in_wild": "yes", "exploited_note": "Google says it is aware that attacks using CVE-2025-14174 exist. CISA lists it as used in real attacks (added 2025-12-12).", "exploited_source_url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html", "confidence": "confirmed", "confidence_note": null, "first_reported": "2025-12-10", "updated_at": "2026-10-27", "cves": [ "CVE-2025-14174" ], "summary": "A bad website could use a bug in the part that draws graphics (ANGLE) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 143.0.7499.109. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.", "am_i_affected": "You are at risk if Chrome is older than 143.0.7499.109 or Edge has not updated since 2025-12. Newer versions are safe from this one.", "action": "Update Chrome to 143.0.7499.109 or newer and restart Edge", "affected": [ { "product": "chrome", "product_name": "Google Chrome", "platform": "windows", "affected_versions": "Chrome versions before 143.0.7499.109", "fixed_version": "143.0.7499.109 or 143.0.7499.110", "fixed_min": "143.0.7499.109", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html" ], "check": { "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.", "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version", "shell": "PowerShell", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "macos", "affected_versions": "Chrome versions before 143.0.7499.109", "fixed_version": "143.0.7499.109 or 143.0.7499.110", "fixed_min": "143.0.7499.109", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html" ], "check": { "menu_path": "Chrome menu bar: Chrome > About Google Chrome.", "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "linux", "affected_versions": "Chrome versions before 143.0.7499.109", "fixed_version": "143.0.7499.109 or 143.0.7499.110", "fixed_min": "143.0.7499.109", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html" ], "check": { "menu_path": "Chrome menu: three dots > Help > About Google Chrome.", "command": "google-chrome --version", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "windows", "affected_versions": "Edge versions released before Microsoft's matching security update", "fixed_version": null, "fixed_min": null, "fix_note": "Microsoft's Edge security release notes list the Edge update that includes the Chromium fix for CVE-2025-14174.", "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.", "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion", "shell": "PowerShell", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "macos", "affected_versions": "Edge versions released before Microsoft's matching security update", "fixed_version": null, "fixed_min": null, "fix_note": "Microsoft's Edge security release notes list the Edge update that includes the Chromium fix for CVE-2025-14174.", "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.", "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" } ], "fix_steps": [ "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.", "Click Relaunch.", "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart." ], "official_patch_links": [ { "label": "Google: update Chrome", "url": "https://support.google.com/chrome/answer/95414" }, { "label": "Google Chrome release note", "url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html" }, { "label": "Microsoft Edge security release notes", "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" } ], "extra_checks": [], "sources": [ { "url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html", "title": "Google Chrome Releases: Stable Channel Update for Desktop (2025-12-10)", "date": "2025-12-10", "kind": "vendor", "official": true }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-14174 (added 2025-12-12)", "date": "2025-12-12", "kind": "cisa", "official": true }, { "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security", "title": "Microsoft: Release notes for Microsoft Edge security updates", "date": "2025-12-12", "kind": "vendor", "official": true }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14174", "title": "NVD: CVE-2025-14174", "date": "2025-12-10", "kind": "nvd", "official": true } ] }, { "id": "chrome-attacked-bug-nov-2025", "url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025/", "path": "/incidents/chrome-attacked-bug-nov-2025/", "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025.json", "title": "Chrome and Edge (Nov 2025): a bug in the part that runs website code (V8) was used in real attacks", "category": "browsers", "platforms": [ "windows", "macos", "linux" ], "products": [ "chrome", "edge" ], "status": "patched", "status_label": "Patched: update now", "severity": "high", "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).", "exploited_in_wild": "yes", "exploited_note": "Google says it is aware that attacks using CVE-2025-13223 exist. CISA lists it as used in real attacks (added 2025-11-19).", "exploited_source_url": "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html", "confidence": "confirmed", "confidence_note": null, "first_reported": "2025-11-17", "updated_at": "2026-10-27", "cves": [ "CVE-2025-13223" ], "summary": "A bad website could use a bug in the part that runs website code (V8) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 142.0.7444.175. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.", "am_i_affected": "You are at risk if Chrome is older than 142.0.7444.175 or Edge is older than 142.0.3595.90. Newer versions are safe from this one.", "action": "Update Chrome to 142.0.7444.175 or newer and restart Edge", "affected": [ { "product": "chrome", "product_name": "Google Chrome", "platform": "windows", "affected_versions": "Chrome versions before 142.0.7444.175", "fixed_version": "142.0.7444.175 (Windows) / 142.0.7444.176 (Mac)", "fixed_min": "142.0.7444.175", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html" ], "check": { "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.", "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version", "shell": "PowerShell", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "macos", "affected_versions": "Chrome versions before 142.0.7444.175", "fixed_version": "142.0.7444.175 (Windows) / 142.0.7444.176 (Mac)", "fixed_min": "142.0.7444.175", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html" ], "check": { "menu_path": "Chrome menu bar: Chrome > About Google Chrome.", "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "linux", "affected_versions": "Chrome versions before 142.0.7444.175", "fixed_version": "142.0.7444.175 (Windows) / 142.0.7444.176 (Mac)", "fixed_min": "142.0.7444.175", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html" ], "check": { "menu_path": "Chrome menu: three dots > Help > About Google Chrome.", "command": "google-chrome --version", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "windows", "affected_versions": "Edge versions before 142.0.3595.90", "fixed_version": "142.0.3595.90", "fixed_min": "142.0.3595.90", "fix_note": null, "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.", "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion", "shell": "PowerShell", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "macos", "affected_versions": "Edge versions before 142.0.3595.90", "fixed_version": "142.0.3595.90", "fixed_min": "142.0.3595.90", "fix_note": null, "fixed_source_urls": [ "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" ], "check": { "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.", "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" } ], "fix_steps": [ "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.", "Click Relaunch.", "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart." ], "official_patch_links": [ { "label": "Google: update Chrome", "url": "https://support.google.com/chrome/answer/95414" }, { "label": "Google Chrome release note", "url": "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html" }, { "label": "Microsoft Edge security release notes", "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" } ], "extra_checks": [], "sources": [ { "url": "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html", "title": "Google Chrome Releases: Stable Channel Update for Desktop (2025-11-17)", "date": "2025-11-17", "kind": "vendor", "official": true }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-13223 (added 2025-11-19)", "date": "2025-11-19", "kind": "cisa", "official": true }, { "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security", "title": "Microsoft: Release notes for Microsoft Edge security updates", "date": "2025-11-18", "kind": "vendor", "official": true }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13223", "title": "NVD: CVE-2025-13223", "date": "2025-11-17", "kind": "nvd", "official": true } ] }, { "id": "chrome-157-nov-3-security-fixes", "url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes/", "path": "/incidents/chrome-157-nov-3-security-fixes/", "json_url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes.json", "title": "Google Chrome 157 fixes 213 security bugs (Nov 3). Restart Chrome to get it.", "category": "browsers", "platforms": [ "windows", "macos", "linux" ], "products": [ "chrome" ], "status": "patched", "status_label": "Patched: update now", "severity": "critical", "severity_source": "Google rates seven of the fixed bugs 'Critical' in its release notes.", "exploited_in_wild": "no", "exploited_note": "Chrome's release notes do not say any of the bugs are being attacked.", "exploited_source_url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html", "confidence": "confirmed", "confidence_note": null, "first_reported": "2026-11-03", "updated_at": "2026-11-03", "cves": [], "summary": "Google moved Chrome to version 157 on November 3, 2026. It fixes 213 security bugs, and seven are rated 'Critical', which means a bad web page could take over parts of your computer. Google says the update rolls out over the coming days and weeks, and it only works after you close and re-open Chrome.", "am_i_affected": "You are at risk if Chrome is older than version 157.0.8103.38. Click the three dots > Help > About Google Chrome to see your version.", "action": "Update Chrome to 157.0.8103.38 or newer", "affected": [ { "product": "chrome", "product_name": "Google Chrome", "platform": "windows", "affected_versions": "Chrome before 157.0.8103.38", "fixed_version": "157.0.8103.38 or 157.0.8103.39", "fixed_min": "157.0.8103.38", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html" ], "check": { "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.", "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version", "shell": "PowerShell", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "macos", "affected_versions": "Chrome before 157.0.8103.38", "fixed_version": "157.0.8103.38 or 157.0.8103.39", "fixed_min": "157.0.8103.38", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html" ], "check": { "menu_path": "Chrome menu bar: Chrome > About Google Chrome.", "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "linux", "affected_versions": "Chrome before 157.0.8103.38", "fixed_version": "157.0.8103.38", "fixed_min": "157.0.8103.38", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html" ], "check": { "menu_path": "Chrome menu: three dots > Help > About Google Chrome.", "command": "google-chrome --version", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" } ], "fix_steps": [ "Open Chrome.", "Click the three dots at the top right > Help > About Google Chrome.", "Wait while Chrome gets the update. If it says Chrome is up to date on 156, check again in a day or two, since Google sends it out slowly.", "Click Relaunch.", "Check that the version number is 157.0.8103.38 or higher." ], "official_patch_links": [ { "label": "Google: how to update Chrome", "url": "https://support.google.com/chrome/answer/95414" } ], "extra_checks": [], "sources": [ { "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html", "title": "Chrome Releases: Stable Channel Update for Desktop (Nov 3, 2026)", "date": "2026-11-03", "kind": "vendor", "official": true } ] }, { "id": "chrome-156-oct-29-security-fixes", "url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes/", "path": "/incidents/chrome-156-oct-29-security-fixes/", "json_url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes.json", "title": "Google Chrome update fixes 21 more security bugs (Oct 29). Restart Chrome to get it.", "category": "browsers", "platforms": [ "windows", "macos", "linux" ], "products": [ "chrome" ], "status": "patched", "status_label": "Patched: update now", "severity": "critical", "severity_source": "Google rates one of the fixed bugs 'Critical' and most of the rest 'High' in its release notes.", "exploited_in_wild": "no", "exploited_note": "Chrome's release notes do not say any of the bugs are being attacked.", "exploited_source_url": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html", "confidence": "confirmed", "confidence_note": null, "first_reported": "2026-10-29", "updated_at": "2026-10-29", "cves": [], "summary": "Google released another Chrome update on October 29, 2026. It fixes 21 security bugs. One is rated 'Critical', which means a bad web page could take over parts of your computer. Chrome downloads the update by itself over the next days, but it only works after you close and re-open Chrome.", "am_i_affected": "You are at risk if Chrome is older than version 156.0.8078.79. Click the three dots > Help > About Google Chrome to see your version.", "action": "Update Chrome to 156.0.8078.79 or newer", "affected": [ { "product": "chrome", "product_name": "Google Chrome", "platform": "windows", "affected_versions": "Chrome before 156.0.8078.79", "fixed_version": "156.0.8078.79 or 156.0.8078.80", "fixed_min": "156.0.8078.79", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html" ], "check": { "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.", "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version", "shell": "PowerShell", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "macos", "affected_versions": "Chrome before 156.0.8078.79", "fixed_version": "156.0.8078.79 or 156.0.8078.80", "fixed_min": "156.0.8078.79", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html" ], "check": { "menu_path": "Chrome menu bar: Chrome > About Google Chrome.", "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "linux", "affected_versions": "Chrome before 156.0.8078.79", "fixed_version": "156.0.8078.79", "fixed_min": "156.0.8078.79", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html" ], "check": { "menu_path": "Chrome menu: three dots > Help > About Google Chrome.", "command": "google-chrome --version", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" } ], "fix_steps": [ "Open Chrome.", "Click the three dots at the top right > Help > About Google Chrome.", "Wait while Chrome gets the update.", "Click Relaunch.", "Check that the version number is 156.0.8078.79 or higher." ], "official_patch_links": [ { "label": "Google: how to update Chrome", "url": "https://support.google.com/chrome/answer/95414" } ], "extra_checks": [], "sources": [ { "url": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html", "title": "Chrome Releases: Stable Channel Update for Desktop (Oct 29, 2026)", "date": "2026-10-29", "kind": "vendor", "official": true } ] }, { "id": "chrome-156-oct-27-security-fixes", "url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes/", "path": "/incidents/chrome-156-oct-27-security-fixes/", "json_url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes.json", "title": "Google Chrome update fixes 52 more security bugs (Oct 27). Restart Chrome to get it.", "category": "browsers", "platforms": [ "windows", "macos", "linux" ], "products": [ "chrome" ], "status": "patched", "status_label": "Patched: update now", "severity": "critical", "severity_source": "Google rates several of the fixed bugs 'Critical' in its release notes.", "exploited_in_wild": "no", "exploited_note": "Chrome's release notes do not say any of the bugs are being attacked.", "exploited_source_url": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html", "confidence": "confirmed", "confidence_note": null, "first_reported": "2026-10-27", "updated_at": "2026-10-28", "cves": [], "summary": "Google released a new Chrome update on October 27, 2026. It fixes 52 security bugs. Four are rated 'Critical', which means a bad web page could take over parts of your computer. Chrome downloads the update by itself over the next days, but it only works after you close and re-open Chrome.", "am_i_affected": "You are at risk if Chrome is older than version 156.0.8078.73. Click the three dots > Help > About Google Chrome to see your version.", "action": "Update Chrome to 156.0.8078.73 or newer", "affected": [ { "product": "chrome", "product_name": "Google Chrome", "platform": "windows", "affected_versions": "Chrome before 156.0.8078.73", "fixed_version": "156.0.8078.73 or 156.0.8078.74", "fixed_min": "156.0.8078.73", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html" ], "check": { "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.", "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version", "shell": "PowerShell", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "macos", "affected_versions": "Chrome before 156.0.8078.73", "fixed_version": "156.0.8078.73 or 156.0.8078.74", "fixed_min": "156.0.8078.73", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html" ], "check": { "menu_path": "Chrome menu bar: Chrome > About Google Chrome.", "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "linux", "affected_versions": "Chrome before 156.0.8078.73", "fixed_version": "156.0.8078.73", "fixed_min": "156.0.8078.73", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html" ], "check": { "menu_path": "Chrome menu: three dots > Help > About Google Chrome.", "command": "google-chrome --version", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" } ], "fix_steps": [ "Open Chrome.", "Click the three dots at the top right > Help > About Google Chrome.", "Wait while Chrome gets the update.", "Click Relaunch.", "Check that the version number is 156.0.8078.73 or higher." ], "official_patch_links": [ { "label": "Google: how to update Chrome", "url": "https://support.google.com/chrome/answer/95414" } ], "extra_checks": [], "sources": [ { "url": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html", "title": "Chrome Releases: Stable Channel Update for Desktop (Oct 27, 2026)", "date": "2026-10-27", "kind": "vendor", "official": true } ] }, { "id": "chrome-156-security-fixes", "url": "https://patchgap.ai/incidents/chrome-156-security-fixes/", "path": "/incidents/chrome-156-security-fixes/", "json_url": "https://patchgap.ai/incidents/chrome-156-security-fixes.json", "title": "Google Chrome 156 fixes 353 security bugs. Restart Chrome to get it.", "category": "browsers", "platforms": [ "windows", "macos", "linux" ], "products": [ "chrome" ], "status": "patched", "status_label": "Patched: update now", "severity": "critical", "severity_source": "Google rates several of the fixed bugs 'Critical' in its release notes.", "exploited_in_wild": "no", "exploited_note": "Chrome's release notes do not say any of the bugs are being attacked.", "exploited_source_url": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html", "confidence": "confirmed", "confidence_note": null, "first_reported": "2026-10-20", "updated_at": "2026-10-27", "cves": [], "summary": "Google released Chrome 156 on October 20, 2026. It fixes 353 security bugs. Several are rated 'Critical', which means a bad web page could take over parts of your computer. Chrome downloads the update by itself, but it only works after you close and re-open Chrome.", "am_i_affected": "You are at risk if Chrome is older than version 156.0.8078.47. Click the three dots > Help > About Google Chrome to see your version.", "action": "Update Chrome to 156.0.8078.47 or newer", "affected": [ { "product": "chrome", "product_name": "Google Chrome", "platform": "windows", "affected_versions": "Chrome before 156.0.8078.47", "fixed_version": "156.0.8078.47 or 156.0.8078.48", "fixed_min": "156.0.8078.47", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html" ], "check": { "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.", "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version", "shell": "PowerShell", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "macos", "affected_versions": "Chrome before 156.0.8078.47", "fixed_version": "156.0.8078.47 or 156.0.8078.48", "fixed_min": "156.0.8078.47", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html" ], "check": { "menu_path": "Chrome menu bar: Chrome > About Google Chrome.", "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "linux", "affected_versions": "Chrome before 156.0.8078.47", "fixed_version": "156.0.8078.47", "fixed_min": "156.0.8078.47", "fix_note": null, "fixed_source_urls": [ "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html" ], "check": { "menu_path": "Chrome menu: three dots > Help > About Google Chrome.", "command": "google-chrome --version", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" } ], "fix_steps": [ "Open Chrome.", "Click the three dots at the top right > Help > About Google Chrome.", "Wait while Chrome gets the update.", "Click Relaunch.", "Check that the version number now starts with 156." ], "official_patch_links": [ { "label": "Google: how to update Chrome", "url": "https://support.google.com/chrome/answer/95414" } ], "extra_checks": [], "sources": [ { "url": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html", "title": "Chrome Releases: Stable Channel Update for Desktop (Chrome 156)", "date": "2026-10-20", "kind": "vendor", "official": true } ] }, { "id": "emudhra-fake-website-certificates", "url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates/", "path": "/incidents/emudhra-fake-website-certificates/", "json_url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates.json", "title": "Fake website certificates: browsers and computers are blocking a certificate company's weak keys", "category": "browsers", "platforms": [ "windows", "macos", "linux" ], "products": [ "chrome", "firefox", "edge", "windows", "macos", "tailscale" ], "status": "partial", "status_label": "Partly patched", "severity": "high", "severity_source": "Mozilla and Google both treat it as a serious break in website trust. No score exists.", "exploited_in_wild": "no", "exploited_note": "Google says no fake certificates were found in public records before it blocked the keys. The company (eMudhra) says it issued no certificates from those keys.", "exploited_source_url": "https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/", "confidence": "confirmed", "confidence_note": null, "first_reported": "2026-10-17", "updated_at": "2026-10-27", "cves": [], "summary": "When you visit a secure website, your browser trusts a 'certificate' to prove the site is real. A company called eMudhra made weak secret keys for 8 of its certificate makers. Someone could use them to make fake certificates and pretend to be any website. Mozilla, Google, Apple and Microsoft all blocked those keys in the days after Oct 17. Most of this is automatic. Make sure your browser and your computer are up to date.", "am_i_affected": "Most people are already protected because the block went out by itself within hours. Browsers and computers that were offline, or had special settings, may be behind. Update your browser and your computer to be sure. Mac command-line tools still need a future Apple update.", "action": "Update your browsers, Windows, Mac and Tailscale", "affected": [ { "product": "firefox", "product_name": "Mozilla Firefox", "platform": "windows", "affected_versions": "Firefox with settings that stopped the automatic block", "fixed_version": "158.0.1 (ESR: 153.5.1 or 115.43.1)", "fixed_min": null, "fix_note": null, "fixed_source_urls": [ "https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/" ], "check": { "menu_path": "Click the three lines at the top right > Help > About Firefox. Firefox checks for updates there.", "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Mozilla Firefox*' | Select-Object DisplayName,DisplayVersion", "shell": "PowerShell", "read_only": true }, "official_download": "https://www.mozilla.org/firefox/new/" }, { "product": "firefox", "product_name": "Mozilla Firefox", "platform": "macos", "affected_versions": "Firefox with settings that stopped the automatic block", "fixed_version": "158.0.1 (ESR: 153.5.1 or 115.43.1)", "fixed_min": null, "fix_note": null, "fixed_source_urls": [ "https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/" ], "check": { "menu_path": "Firefox menu bar: Firefox > About Firefox.", "command": "defaults read \"/Applications/Firefox.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://www.mozilla.org/firefox/new/" }, { "product": "firefox", "product_name": "Mozilla Firefox", "platform": "linux", "affected_versions": "Firefox with settings that stopped the automatic block", "fixed_version": "158.0.1 (ESR: 153.5.1 or 115.43.1)", "fixed_min": null, "fix_note": null, "fixed_source_urls": [ "https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/" ], "check": { "menu_path": "Firefox menu > Help > About Firefox.", "command": "firefox --version", "shell": "Terminal", "read_only": true }, "official_download": "https://www.mozilla.org/firefox/new/" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "windows", "affected_versions": "Chrome that has not yet received the Oct 27 trust-list update", "fixed_version": null, "fixed_min": null, "fix_note": "Chrome blocked the keys the same day with no update. It removes the whole root certificate in a release that began rolling out Oct 27, 2026.", "fixed_source_urls": [ "https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/" ], "check": { "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.", "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version", "shell": "PowerShell", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "macos", "affected_versions": "Chrome that has not yet received the Oct 27 trust-list update", "fixed_version": null, "fixed_min": null, "fix_note": "Chrome blocked the keys the same day with no update. It removes the whole root certificate in a release that began rolling out Oct 27, 2026.", "fixed_source_urls": [ "https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/" ], "check": { "menu_path": "Chrome menu bar: Chrome > About Google Chrome.", "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "chrome", "product_name": "Google Chrome", "platform": "linux", "affected_versions": "Chrome that has not yet received the Oct 27 trust-list update", "fixed_version": null, "fixed_min": null, "fix_note": "Chrome blocked the keys the same day with no update. It removes the whole root certificate in a release that began rolling out Oct 27, 2026.", "fixed_source_urls": [ "https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/" ], "check": { "menu_path": "Chrome menu: three dots > Help > About Google Chrome.", "command": "google-chrome --version", "shell": "Terminal", "read_only": true }, "official_download": "https://support.google.com/chrome/answer/95414" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "windows", "affected_versions": "Edge that has not yet received the Oct 27 trust-list update", "fixed_version": null, "fixed_min": null, "fix_note": "Microsoft Edge blocks the keys automatically. Microsoft planned to remove the affected roots from Edge's trust list on Oct 27, 2026.", "fixed_source_urls": [ "https://www.microsoft.com/en-us/msrc/blog/2026/10/microsoft-response-to-compromised-emudhra-certificate-authority-keys" ], "check": { "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.", "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion", "shell": "PowerShell", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" }, { "product": "edge", "product_name": "Microsoft Edge", "platform": "macos", "affected_versions": "Edge that has not yet received the Oct 27 trust-list update", "fixed_version": null, "fixed_min": null, "fix_note": "Microsoft Edge blocks the keys automatically. Microsoft planned to remove the affected roots from Edge's trust list on Oct 27, 2026.", "fixed_source_urls": [ "https://www.microsoft.com/en-us/msrc/blog/2026/10/microsoft-response-to-compromised-emudhra-certificate-authority-keys" ], "check": { "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.", "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString", "shell": "Terminal", "read_only": true }, "official_download": "https://www.microsoft.com/edge/download" }, { "product": "windows", "product_name": "Windows 10 and 11", "platform": "windows", "affected_versions": "Windows without Microsoft's Oct 26, 2026 trust-list update", "fixed_version": null, "fixed_min": null, "fix_note": "Microsoft released an out-of-band Windows update on Oct 26, 2026 that removes seven affected certificates.", "fixed_source_urls": [ "https://www.microsoft.com/en-us/msrc/blog/2026/10/microsoft-response-to-compromised-emudhra-certificate-authority-keys" ], "check": { "menu_path": "Start > Settings > Windows Update. Then click Update history to see recent updates.", "command": "Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,BuildNumber; Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID,InstalledOn", "shell": "PowerShell", "read_only": true }, "official_download": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a" }, { "product": "macos", "product_name": "macOS", "platform": "macos", "affected_versions": "Mac command-line tools (not Safari or other apps)", "fixed_version": null, "fixed_min": null, "fix_note": "Apple blocked the certificates automatically from Oct 19, 2026 (and the root on Oct 23). A future macOS update will block them in command-line tools too.", "fixed_source_urls": [ "https://support.apple.com/en-us/149555" ], "check": { "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.", "command": "sw_vers -productVersion", "shell": "Terminal", "read_only": true }, "official_download": "https://support.apple.com/en-us/108382" }, { "product": "tailscale", "product_name": "Tailscale", "platform": "windows", "affected_versions": "Tailscale older than v1.104.2", "fixed_version": "1.104.2", "fixed_min": "1.104.2", "fix_note": "Tailscale v1.104.2 (Oct 21, 2026) includes Go 1.27.3, which refuses the compromised certificates.", "fixed_source_urls": [ "https://tailscale.com/security-bulletins", "https://tailscale.com/changelog" ], "check": { "menu_path": "Click the Tailscale icon (tray on Windows, menu bar on Mac) and choose About Tailscale.", "command": "tailscale version", "shell": "PowerShell", "read_only": true }, "official_download": "https://tailscale.com/download" }, { "product": "tailscale", "product_name": "Tailscale", "platform": "macos", "affected_versions": "Tailscale older than v1.104.2", "fixed_version": "1.104.2", "fixed_min": "1.104.2", "fix_note": "Tailscale v1.104.2 (Oct 21, 2026) includes Go 1.27.3, which refuses the compromised certificates.", "fixed_source_urls": [ "https://tailscale.com/security-bulletins", "https://tailscale.com/changelog" ], "check": { "menu_path": "Click the Tailscale icon in the menu bar > About Tailscale.", "command": "tailscale version", "shell": "Terminal", "read_only": true }, "official_download": "https://tailscale.com/download" }, { "product": "tailscale", "product_name": "Tailscale", "platform": "linux", "affected_versions": "Tailscale older than v1.104.2", "fixed_version": "1.104.2", "fixed_min": "1.104.2", "fix_note": "Tailscale v1.104.2 (Oct 21, 2026) includes Go 1.27.3, which refuses the compromised certificates.", "fixed_source_urls": [ "https://tailscale.com/security-bulletins", "https://tailscale.com/changelog" ], "check": { "menu_path": "Open the app and look in its Help or About menu, or check your software manager.", "command": null, "shell": null, "read_only": null }, "official_download": "https://tailscale.com/download" } ], "fix_steps": [ "Update your browser: Chrome (three dots > Help > About Google Chrome), Firefox (three lines > Help > About Firefox), Edge (three dots > Help and feedback > About Microsoft Edge).", "Run Windows Update (Settings > Windows Update) and install everything, including the update from Oct 26.", "On a Mac, run Software Update (System Settings > General > Software Update).", "If you use Tailscale, update it to the newest version.", "A site that suddenly shows a certificate warning might use the blocked company. That is expected. Do not click through the warning. Tell the site owner." ], "official_patch_links": [ { "label": "Mozilla: blog post about the eMudhra block", "url": "https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/" }, { "label": "Apple: about the compromised eMudhra certificates", "url": "https://support.apple.com/en-us/149555" }, { "label": "Microsoft: response to the eMudhra keys", "url": "https://www.microsoft.com/en-us/msrc/blog/2026/10/microsoft-response-to-compromised-emudhra-certificate-authority-keys" } ], "extra_checks": [], "sources": [ { "url": "https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/", "title": "Mozilla Security Blog: Protecting Firefox users after the eMudhra compromise", "date": "2026-10-20", "kind": "vendor", "official": true }, { "url": "https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/", "title": "Google: Protecting Chrome and Android users from compromised eMudhra certificates", "date": "2026-10-20", "kind": "vendor", "official": true }, { "url": "https://support.apple.com/en-us/149555", "title": "Apple Support: About the compromised eMudhra intermediate CAs", "date": "2026-10-23", "kind": "vendor", "official": true }, { "url": "https://www.microsoft.com/en-us/msrc/blog/2026/10/microsoft-response-to-compromised-emudhra-certificate-authority-keys", "title": "Microsoft MSRC: Response to compromised eMudhra keys", "date": "2026-10-26", "kind": "vendor", "official": true }, { "url": "https://tailscale.com/changelog", "title": "Tailscale changelog (Oct 21, 2026 entry)", "date": "2026-10-21", "kind": "vendor", "official": true }, { "url": "https://emudhra.com/en/post/certificate-security-incident", "title": "eMudhra: Statement on the certificate security incident", "date": "2026-10-21", "kind": "primary", "official": true }, { "url": "https://tailscale.com/security-bulletins", "title": "Tailscale security bulletin TS-2026-013 (eMudhra certificates)", "date": "2026-10-21", "kind": "vendor", "official": true } ] } ] }