finance
Google Issues Second Chrome Security Update in Two Days, Patching Seven Vulnerabilities
Google issued a Chrome security update on July 16 that fixed seven vulnerabilities, including three critical use-after-free flaws. This follows an earlier update on July 14. The patches apply to Windows, Mac, and Linux users.
Jul 18, 6:35 AM·1m read2 sources
lobste.rsAudio version
Tap play to generate a narrated version.
Developing·Limited corroboration so far. This page will refresh as more sources emerge.
Google released a Chrome security update on July 16, 2026, that addressed seven vulnerabilities, three of them rated critical. Forbes reported that the update came within 48 hours of a prior security release on July 14. The July 14 patch covered six use-after-free vulnerabilities, two rated critical.
The July 16 update fixed three additional critical use-after-free flaws, all discovered internally by Google rather than through external reports. Daniel Yip, Google’s technical program manager for Chrome security updates, identified the critical issues by component. CVE-2026-15899 affects Chrome’s CameraCapture component.
CVE-2026-15900 impacts the GPU process. CVE-2026-15901 targets the Chrome Network component. No ongoing attacks were reported in connection with the vulnerabilities. Google distributes Chrome updates automatically, prompting users to relaunch the browser once the patch is applied.
A use-after-free vulnerability occurs when a program references heap-allocated memory after it has been freed, potentially enabling data corruption or arbitrary code execution. The July 16 update applies to Windows, Mac, and Linux users.
