CVE-2026-91749Patch(google / chrome)

LOWCVSS 9.6 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch google chrome systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

google CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html

Other references

https://issues.chromium.org/issues/558456602

Weakness type (CWE)

CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

chrome

Threat summary

Patch or workaround signal is available
6 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 4 signals
Technical details provided in 4 signals
Disclosure: 2 classified signals
Peaked 3d ago at 3 mentions (2026-09-16); latest day: 1
6 total mentions across 4 days

Affected systems

Vendors

google

Products

chrome

Deep dive

Activity timeline6 mentions / 4d

Signal classification2 categories

Patch

466.7%

Disclosure

233.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-16	3	Disclosure2Patch1
2026-09-19	1	Patch1
2026-09-21	1	Patch1
2026-09-25	1	Patch1

Full discourse6 posts

WinD39@WinD392046d
Disclosure
Another CVE from Google Chrome! 🚀 CVE-2026-91749 - Critical Glad to contribute another security finding to Chrome and grateful to the Chrome Security Team for the collaboration. #CVE #GoogleChrome #CyberSecurity #BugBounty #SecurityResearch https://t.co/MPOTVjkcT8
Post summary
The text announces a new Google Chrome CVE, CVE-2026-91749, labeled Critical, and thanks the Chrome Security Team. It does not provide PoC, exploit code, active exploitation, patching, or detailed technical vulnerability information.
22053104.2K
524 followersView on X
ابو سعود 💻@AbuSaud_Cyber42d
Patch
قوقل نزّل تحديث أمني مهم لـ Chrome 153 يصلّح 42 ثغرة، منها 3 مصنّفة Critical 🛡️ القناة المستقرة صارت 153.0.8010.47/.48 على Windows و macOS، و 153.0.8010.47 على Linux، والتحديث ينزل تدريجيًا خلال الأيام والاسابيع الجاية. CVE-2026-91721 ثغرة use-after-free في مكوّن Internals بـ Chrome، رصدها الباحث xinyang، و CVE-2026-91749 بعد use-after-free تأثر على Workers، رصدها WinD39–Huynh Dinh Vu. والثالثة CVE-2026-91726 قراءة خارج الحدود in WebGL، لقاها قوقل داخليًا.
Post summary
Google released Chrome 153 stable channel update patching 42 vulnerabilities (3 Critical), detailing specific fixed versions and technical root causes (use-after-free, out-of-bounds read) for three highlighted CVEs.
12020384
1.9K followersView on X
sunil kumawat@Sunil_kumawat1741d
Patch
4/ Chrome — CVE-2026-91749 Critical use-after-free in Workers. Fixed in 153.0.8010.47+. Update and fully relaunch. Leaving the update bar open is not a security control.
Post summary
The post discloses a critical use-after-free vulnerability in Chrome Workers (CVE-2026-91749) and emphasizes that it is fixed in version 153.0.8010.47+, urging users to update and fully relaunch the browser.
1000065
23 followersView on X
NCIIPC India@NCIIPC45d
Patch
#Google has released Security Updates for Chrome which addresses multiple critical vulnerabilities. Apply Updates! #CVE-2026-91726 #CVE-2026-91721 #CVE-2026-91749 https://chromereleases.googleblog.com/
Post summary
Google released security updates for Chrome addressing multiple critical vulnerabilities, and the text explicitly urges users to apply the updates.
00010346
8.5K followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker36d
Patch
【重要】Google ChromeにCVSS 9.6、153.0.8010.47へ更新を https://www.cybernote.click/2026/09/19/google-chrome-cve-2026-91749-91721-update/ #IT #Security #cybersecurity
Post summary
The text announces a Google Chrome update to version 153.0.8010.47 addressing a vulnerability with a CVSS score of 9.6, focusing on patching.
0000053
208 followersView on X
VulDB 🛡@vuldb45d
Disclosure
There is a new vulnerability with elevated criticality in Google Chrome (CVE-2026-91749) https://vuldb.com/vuln/404816
Post summary
The text announces a new critical Google Chrome vulnerability (CVE-2026-91749) with elevated severity but lacks specific technical details, exploits, or mitigation guidance.
00000162
2.3K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	google	chrome	-	-	-

Explore more

Back to dashboard google CVEs chrome vulnerabilities

What researchers are saying

CVE-2026-91749

ابو سعود 💻[verified]@AbuSaud_CyberPatch

Google released Chrome 153 stable channel update patching 42 vulnerabilities (3 Critical), detailing specific fixed versions and technical root causes (use-after-free, out-of-bounds read) for three highlighted CVEs.

WinD39@WinD3920Disclosure

The text announces a new Google Chrome CVE, CVE-2026-91749, labeled Critical, and thanks the Chrome Security Team. It does not provide PoC, exploit code, active exploitation, patching, or detailed technical vulnerability information.

sunil kumawat@Sunil_kumawat17Patch

The post discloses a critical use-after-free vulnerability in Chrome Workers (CVE-2026-91749) and emphasizes that it is fixed in version 153.0.8010.47+, urging users to update and fully relaunch the browser.

NCIIPC India@NCIIPCPatch

Google released security updates for Chrome addressing multiple critical vulnerabilities, and the text explicitly urges users to apply the updates.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerPatch

The text announces a Google Chrome update to version 153.0.8010.47 addressing a vulnerability with a CVSS score of 9.6, focusing on patching.

VulDB 🛡@vuldbDisclosure

The text announces a new critical Google Chrome vulnerability (CVE-2026-91749) with elevated severity but lacks specific technical details, exploits, or mitigation guidance.