惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Google DeepMind News
Google DeepMind News
B
Blog RSS Feed
量子位
aimingoo的专栏
aimingoo的专栏
V
Visual Studio Blog
Y
Y Combinator Blog
Vercel News
Vercel News
云风的 BLOG
云风的 BLOG
宝玉的分享
宝玉的分享
Engineering at Meta
Engineering at Meta
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
GbyAI
GbyAI
人人都是产品经理
人人都是产品经理
博客园 - 叶小钗
Stack Overflow Blog
Stack Overflow Blog
大猫的无限游戏
大猫的无限游戏
Microsoft Security Blog
Microsoft Security Blog
B
Blog
Last Week in AI
Last Week in AI
有赞技术团队
有赞技术团队
博客园 - 聂微东
腾讯CDC
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
J
Java Code Geeks

Lifehacker

Lifehacker Deals Live Blog: The Best Tech Sales, All in One Place You Can Choose New 'Thinking Levels' for Gemini Lifehacker Is Hosting a 'Big Guessing Game' for Apple's 2026 Announcements How to Watch WWDC 2026 Live I’m a Deals Writer, and These Are My Top 10 Tech Deals This Week 10 Hacks Every Claude User Should Know This 65-Inch Premium Sony OLED TV Is $700 Off Right Now Hyrox Race Live Blog: Watch Our Runner and Our Weightlifter Take on the Latest Viral Fitness Competition Carnival Cruise Just Had a Massive Data Breach Google Chrome Just Rolled Out a Major New Security Feature The Best Books, Movies, Video Games, and Podcasts You Should Check Out After Watching 'The Mandalorian' The Garmin Epix Pro Smartwatch Is Half Off Right Now We Finally Know More About Apple's New Siri This Massive LG Curved Gaming Monitor Is $300 Off Right Now This Craftsman Battery Kit Comes With a Free Tool Worth up to $139 I Used Garmin's Heart Rate Monitor to Measure My 'Running Economy,' and Here's What I Learned What You Get With Each Paid AI Subscription You Can Get a Free Ryobi Tool From Home Depot Right Now The Best Books, Movies, Video Games, and Podcasts to Check Out After Watching ‘Call the Midwife’ There's a New Way to Make Your Gmail More Private 10 Shows Like 'The Mandalorian' You Should Watch Next The Hisense CanvasTV Is a Great Alternative to Samsung's 'The Frame,' and Now It's up to $1,000 Off You Have Another Chance to Get the M5 MacBook Pro for $200 Off Meta Is Rolling Out New Subscriptions for Instagram, WhatsApp, and Facebook This Eufy Solar Security Camera Is 33% Off Right Now This Massive Samsung Ultrawide Gaming Monitor Is $600 Off Right Now The Oura Ring 5 Is Official, and Starts Shipping Next Week Apple Will Now Give You More Trade-In Value for These iPhones, iPads, and Macs This EcoFlow Portable Generator Is Over $400 Off Right Now You Can Already Save $100 on the New M4 iPad Air
Update Chrome ASAP to Protect Yourself From This Active E...
Jake Peterson · 2026-06-11 · via Lifehacker

Jake Peterson

Jake Peterson Senior Technology Editor

Experience

Jake Peterson is Lifehacker’s Tech Editor, and has been covering tech news and how-tos for nearly a decade. His team covers all things technology, including AI, smartphones, computers, game consoles, and subscriptions.

Read Full Bio

Add as a preferred source on Google
Add as a preferred source on Google

google Chrome on computer

Credit: Gabby Jones/Bloomberg via Getty Images

Key Takeaways

  1. Google released an update for Chrome that patches 74 security flaws—including an actively exploited zero-day.
  2. The flaw allows attackers to run their own code within Chrome after you click on a malicious link.
  3. To protect yourself, install the update as soon as possible.

Table of Contents


If you use Chrome (or a Chromium-based browser like Edge), listen up: You need to install your browser's latest update. Without it, you leave your browser vulnerable to attack, which puts its data in jeopardy.

As reported by Malwarebytes Labs, Google's latest update for Chrome (version 149.0.7827.102/.103 for Windows and Mac and 149.0.7827.102 for Linux) includes patches for 74 security vulnerabilities. 17 of these vulnerabilities are rated as "Critical," while all but two of the others are rated "High." That alone would indicate this update is rather important, but there's more: One of these vulnerabilities is currently actively exploited.

Google confirmed in its update that there is an exploit in the wild for the flaw tracked as CVE-2026-11645. This flaw is an "out of bounds memory access" vulnerability affecting V8, Chrome's JavaScript engine. Hackers can exploit the flaw to have their own program read or write data outside of the memory spaces it's supposed to access. In other words, a hacker could run their own code in Chrome, as if it were something legitimate Google placed in the browser. All a hacker would need to do is trick you into clicking a link to a malicious website, and they could effectively take over your browser.

Because this flaw was exploited before Google issued the patch, it's considered a "zero-day." That's dangerous, because hackers could potentially abuse the flaw en masse before most users have a chance to update their browsers. If there is a silver lining here—besides there being an update available to patch the flaw—it's that the zero-day is limited to Chrome. Google says hackers can only run code "inside a sandbox," which means they can exploit this flaw to take over the device you're running Chrome on. Still, it's important to block attackers from exploiting this flaw in Chrome itself, as well as any other flaw on the list they may discover exploits for. As such, you should make sure Chrome is updated as soon as possible.

What do you think so far?

To check Chrome's update status, click the three-dots in the top-right corner of the window, then head to Help > About Google Chrome. Here, Chrome will look for the latest update. If it's already installed, you're set. If not, hit "Relaunch" to install the patch.

Other Chromium-based browsers may not get the update yet, but keep tabs on their update channels, too: As soon as the patch is available, install it.

The Download Newsletter Never miss a tech story

Jake Peterson portrait Jake Peterson

Get the latest tech news, reviews, and advice from Jake and the team.

The Download NewsletterNever miss a tech story. Get the latest tech news, reviews, and advice from Jake and the team.

Lifehacker Logo

Lifehacker has been a go-to source of tech help and life advice since 2005. Our mission is to offer reliable tech help and credible, practical, science-based life advice to help you live better.

© 2001-2026 Ziff Davis, LLC., A ZIFF DAVIS COMPANY. ALL RIGHTS RESERVED.

Lifehacker is a federally registered trademark of Ziff Davis and may not be used by third parties without explicit permission. The display of third-party trademarks and trade names on this site does not necessarily indicate any affiliation or the endorsement of Lifehacker. If you click an affiliate link and buy a product or service, we may be paid a fee by that merchant.