tlder@devTwo critical sandbox escapes patched in Chrome 151
tlder@dev:~$
Cross-Cutting/security, web

Two critical sandbox escapes patched in Chrome 151

  • Discussion

Chrome 151.0.7922.169/.170 went out to the desktop stable channel on Tuesday with fifteen security fixes. The two that matter are the criticals: a buffer overflow in WebGL (CVE-2026-76034) and another in Dawn (CVE-2026-76036), the WebGPU backend. Both are the kind that turn a bad web page into a sandbox escape, which is exactly the class of Chrome bug you don't leave sitting on a machine. The update rolls out over the coming days, but you don't have to wait for it to find you. Open the About page, let it pull the build, and restart. If you manage a fleet, this is a same-day push rather than a next-maintenance-window one.