Google Releases Chrome 152 Update to Fix Six Zero‑Day Flaws, Including Critical V8 Bug

Google has rolled out Chrome version 152, a security update that addresses a total of twelve vulnerabilities discovered in the browser, among them a high‑severity type‑confusion issue in the V8 JavaScript engine. The release marks the sixth zero‑day exploit targeting Chrome in 2026, according to reporting from SecurityWeek.

The update, which is now being pushed to all supported Chrome installations, prioritises the V8 flaw because of its potential to allow remote code execution. Type‑confusion bugs can cause the engine to misinterpret data structures, leading malicious scripts to gain privileges they should not have. While the exact mechanics of the exploit have not been disclosed, security researchers have warned that such vulnerabilities can be weaponised in targeted attacks against both individual users and enterprises.

Google’s Chrome security team has a long‑standing practice of issuing rapid patches for zero‑day findings. The company typically follows a coordinated disclosure process, working with security researchers to develop and test fixes before public release. In this case, the patch was made available within weeks of the vulnerability’s identification, reflecting the heightened attention to browser security amid a surge in web‑based threats.

Beyond the V8 issue, the twelve‑vulnerability bundle includes several medium‑severity bugs in the browser’s rendering engine, sandbox, and networking components. None of the additional flaws are reported to be actively exploited in the wild, but they could have been leveraged in combination with other attack vectors. Google advises users to update immediately, noting that older versions of Chrome remain vulnerable until the patch is applied.

The release arrives at a time when Chrome continues to dominate the web browser market, holding a share of over 60 percent globally. Its widespread use makes it a frequent target for attackers seeking to compromise large numbers of users through a single exploit. Security experts therefore stress the importance of regular updates as a fundamental line of defence against evolving threats.

Industry observers note that the frequency of zero‑day discoveries in 2026 suggests a broader trend of sophisticated exploitation techniques aimed at modern browsers. As web applications become more complex and rely heavily on JavaScript, the attack surface for engines like V8 expands. Companies are urged to adopt layered security strategies, including endpoint protection, network monitoring, and strict content security policies, to mitigate risk.

Looking ahead, Google has indicated that its upcoming Chrome releases will incorporate additional hardening measures for the V8 engine, such as stricter type checking and enhanced sandbox isolation. The firm also continues its bug‑bounty program, which rewards researchers for identifying vulnerabilities before they can be weaponised. The ongoing collaboration between Google and the security community is seen as a critical factor in maintaining the browser’s resilience.

Users and administrators are encouraged to verify that Chrome 152 is installed by checking the browser’s “About Chrome” menu, which should display the version number and confirm that the update has been applied. Those using managed devices should ensure that organizational policies enforce automatic updates to keep the software current and reduce exposure to future zero‑day exploits.