VulnerabilitySANS NewsBites
Google Fixes Another Zero-day in Chrome
NEOSEC enrichment — no mirror of the original source
On Tuesday, March 31, Google updated the Chrome stable channel for desktop to 146.0.7680.177/178 for Windows/Mac and 146.0.7680.177 for Linux. The updated version of the browser includes fixes for 21 security issues, 19 of which are rated h
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
Affected vendors and products
More on Zero-day
Other advisories
- CriticalCVE-2026-76418Cisco ASA and FTD zero-day CVE-2026-76418 exploited to crash SSL VPN firewalls
- CriticalCVE-2026-114625Arista VeloCloud Orchestrator zero-day CVE-2026-114625 exploited in attacks
- CriticalCVE-2026-108398Windows Shell Mark-of-the-Web bypass zero-day (CVE-2026-96951)
- CriticalCVE-2026-111357Ivanti Connect Secure zero-day chain (CVE-2026-104935) exploited for root
- CriticalCVE-2026-104286FortiMail unauthenticated file-write zero-day CVE-2026-104286
- CriticalCVE-2026-86950Apple CoreGraphics zero-day CVE-2026-86950
- CriticalCVE-2026-88778Citrix NetScaler ADC and Gateway: two unauthenticated RCE zero-days under active exploitation (CVE-2026-88771, CVE-2026-88772)
- CriticalCVE-2026-87491Chrome zero-day CVE-2026-87491 (V8 OOB write)
Other news entries
- Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-DayNewsSecurityWeek
- Zyxel patches a zero-day hiding behind an old fixNewsCSO Online
- Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command ExecutionNewsThe Hacker News
- Zyxel fixes zero-day exploited to hack nearly 1,000 network switchesNewsBleepingComputer
- Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)NewsRapid7
- Ivanti patches two more Connect Secure zero-days chained in attacksNewsBleepingComputer
- Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack ChainNewsSecurityWeek
- Attacken auf Lücken in Drupal, Ivanti Connect Secure und Synology laufenNewsheise Security
Source: https://www.helpnetsecurity.com/
ID