Google Alerts Users to Serious Chrome Bugs With Takeover Risk

Google released a Chrome update addressing three high-severity vulnerabilities—CVE-2026-3061, CVE-2026-3062, and CVE-2026-3063—impacting the Media component, Tint WebGPU shader compiler, and DevTools; the flaws include out-of-bounds memory reads/writes that could lead to memory disclosure, sandbox escape, or remote code execution. Google reported no active exploitation at publication; organizations are advised to patch immediately, harden browser policies (e.g., disable WebGPU where not required, restrict DevTools), monitor endpoint telemetry, and apply network and least-privilege mitigations.