惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

人人都是产品经理
人人都是产品经理
有赞技术团队
有赞技术团队
WordPress大学
WordPress大学
月光博客
月光博客
T
Tailwind CSS Blog
阮一峰的网络日志
阮一峰的网络日志
小众软件
小众软件
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
Last Week in AI
Last Week in AI
大猫的无限游戏
大猫的无限游戏
S
SegmentFault 最新的问题
罗磊的独立博客
Jina AI
Jina AI
酷 壳 – CoolShell
酷 壳 – CoolShell
宝玉的分享
宝玉的分享
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
博客园 - 三生石上(FineUI控件)
量子位
雷峰网
雷峰网
Apple Machine Learning Research
Apple Machine Learning Research
美团技术团队
博客园 - 聂微东
V
V2EX

Lifehacker

Lifehacker Deals Live Blog: The Best Tech Sales, All in One Place You Can Choose New 'Thinking Levels' for Gemini Lifehacker Is Hosting a 'Big Guessing Game' for Apple's 2026 Announcements How to Watch WWDC 2026 Live I’m a Deals Writer, and These Are My Top 10 Tech Deals This Week 10 Hacks Every Claude User Should Know This 65-Inch Premium Sony OLED TV Is $700 Off Right Now Hyrox Race Live Blog: Watch Our Runner and Our Weightlifter Take on the Latest Viral Fitness Competition Carnival Cruise Just Had a Massive Data Breach Google Chrome Just Rolled Out a Major New Security Feature The Best Books, Movies, Video Games, and Podcasts You Should Check Out After Watching 'The Mandalorian' The Garmin Epix Pro Smartwatch Is Half Off Right Now We Finally Know More About Apple's New Siri This Massive LG Curved Gaming Monitor Is $300 Off Right Now This Craftsman Battery Kit Comes With a Free Tool Worth up to $139 I Used Garmin's Heart Rate Monitor to Measure My 'Running Economy,' and Here's What I Learned What You Get With Each Paid AI Subscription You Can Get a Free Ryobi Tool From Home Depot Right Now The Best Books, Movies, Video Games, and Podcasts to Check Out After Watching ‘Call the Midwife’ There's a New Way to Make Your Gmail More Private 10 Shows Like 'The Mandalorian' You Should Watch Next The Hisense CanvasTV Is a Great Alternative to Samsung's 'The Frame,' and Now It's up to $1,000 Off You Have Another Chance to Get the M5 MacBook Pro for $200 Off Meta Is Rolling Out New Subscriptions for Instagram, WhatsApp, and Facebook This Eufy Solar Security Camera Is 33% Off Right Now This Massive Samsung Ultrawide Gaming Monitor Is $600 Off Right Now The Oura Ring 5 Is Official, and Starts Shipping Next Week Apple Will Now Give You More Trade-In Value for These iPhones, iPads, and Macs This EcoFlow Portable Generator Is Over $400 Off Right Now You Can Already Save $100 on the New M4 iPad Air
Update Chrome ASAP to Protect Yourself From This Active E...
Jake Peterson · 2026-06-11 · via Lifehacker

Jake Peterson

Jake Peterson Senior Technology Editor

Experience

Jake Peterson is Lifehacker’s Tech Editor, and has been covering tech news and how-tos for nearly a decade. His team covers all things technology, including AI, smartphones, computers, game consoles, and subscriptions.

Read Full Bio

Add as a preferred source on Google
Add as a preferred source on Google

google Chrome on computer

Credit: Gabby Jones/Bloomberg via Getty Images

Key Takeaways

  1. Google released an update for Chrome that patches 74 security flaws—including an actively exploited zero-day.
  2. The flaw allows attackers to run their own code within Chrome after you click on a malicious link.
  3. To protect yourself, install the update as soon as possible.

Table of Contents


If you use Chrome (or a Chromium-based browser like Edge), listen up: You need to install your browser's latest update. Without it, you leave your browser vulnerable to attack, which puts its data in jeopardy.

As reported by Malwarebytes Labs, Google's latest update for Chrome (version 149.0.7827.102/.103 for Windows and Mac and 149.0.7827.102 for Linux) includes patches for 74 security vulnerabilities. 17 of these vulnerabilities are rated as "Critical," while all but two of the others are rated "High." That alone would indicate this update is rather important, but there's more: One of these vulnerabilities is currently actively exploited.

Google confirmed in its update that there is an exploit in the wild for the flaw tracked as CVE-2026-11645. This flaw is an "out of bounds memory access" vulnerability affecting V8, Chrome's JavaScript engine. Hackers can exploit the flaw to have their own program read or write data outside of the memory spaces it's supposed to access. In other words, a hacker could run their own code in Chrome, as if it were something legitimate Google placed in the browser. All a hacker would need to do is trick you into clicking a link to a malicious website, and they could effectively take over your browser.

Because this flaw was exploited before Google issued the patch, it's considered a "zero-day." That's dangerous, because hackers could potentially abuse the flaw en masse before most users have a chance to update their browsers. If there is a silver lining here—besides there being an update available to patch the flaw—it's that the zero-day is limited to Chrome. Google says hackers can only run code "inside a sandbox," which means they can exploit this flaw to take over the device you're running Chrome on. Still, it's important to block attackers from exploiting this flaw in Chrome itself, as well as any other flaw on the list they may discover exploits for. As such, you should make sure Chrome is updated as soon as possible.

What do you think so far?

To check Chrome's update status, click the three-dots in the top-right corner of the window, then head to Help > About Google Chrome. Here, Chrome will look for the latest update. If it's already installed, you're set. If not, hit "Relaunch" to install the patch.

Other Chromium-based browsers may not get the update yet, but keep tabs on their update channels, too: As soon as the patch is available, install it.

The Download Newsletter Never miss a tech story

Jake Peterson portrait Jake Peterson

Get the latest tech news, reviews, and advice from Jake and the team.

The Download NewsletterNever miss a tech story. Get the latest tech news, reviews, and advice from Jake and the team.

Lifehacker Logo

Lifehacker has been a go-to source of tech help and life advice since 2005. Our mission is to offer reliable tech help and credible, practical, science-based life advice to help you live better.

© 2001-2026 Ziff Davis, LLC., A ZIFF DAVIS COMPANY. ALL RIGHTS RESERVED.

Lifehacker is a federally registered trademark of Ziff Davis and may not be used by third parties without explicit permission. The display of third-party trademarks and trade names on this site does not necessarily indicate any affiliation or the endorsement of Lifehacker. If you click an affiliate link and buy a product or service, we may be paid a fee by that merchant.