Google Chrome Dev (EXE) 146.0.7635.3
Google Chrome Dev (EXE) 146.0.7635.3, released January 15, 2026, fixes 26 CVEs in Google Chrome Dev (EXE). One of them is being exploited (CVE-2026-2441); 1 on CISA KEV. Patch Radar priority: Patch now. The latest Google Chrome Dev (EXE) is 159.0.8144.0, which also fixes every one of these CVEs.
Superseded. The latest Google Chrome Dev (EXE) is 159.0.8144.0, which also fixes every CVE on this page. Install that instead.
Priority of the 26 CVEs
Applies to
| Product | Version |
|---|---|
| Google Chrome Dev (EXE) | 146.0.7635.3 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-2441 | Chromium: CVE-2026-2441 Use after free in CSS | 8.8 | 0.5446 | KEVExploited |
| Urgent | CVE-2026-3545 | Chromium: CVE-2026-3545 Insufficient data validation in Navigation | 9.6 | 0.0041 | None reported |
| Urgent | CVE-2026-3062 | Chromium: CVE-2026-3062 Out of bounds read and write in Tint | 9.8 | 0.0038 | None reported |
| Urgent | CVE-2026-3061 | Chromium: CVE-2026-3061 Out of bounds read in Media | 9.1 | 0.0034 | None reported |
| High | CVE-2026-2315 | Google Chrome: Inappropriate implementation in WebGPU in Google Chrome prior to 145.0.7632.45 allowed a remote attacker… | 8.8 | 0.0909 | None reported |
| High | CVE-2026-2314 | Chromium: CVE-2026-2314 Heap buffer overflow in Codecs | 8.8 | 0.0462 | None reported |
| High | CVE-2026-2313 | Chromium: CVE-2026-2313 Use after free in CSS | 8.8 | 0.0451 | None reported |
| High | CVE-2026-3538 | Chromium: CVE-2026-3538 Integer overflow in Skia | 9.6 | 0.0078 | None reported |
| High | CVE-2026-3536 | Chromium: CVE-2026-3536 Integer overflow in ANGLE | 9.6 | 0.0070 | None reported |
| High | CVE-2026-2649 | Chromium: CVE-2026-2649 Integer overflow in V8 | 8.8 | 0.0062 | None reported |
| High | CVE-2026-2650 | Chromium: CVE-2026-2650 Heap buffer overflow in Media | 8.8 | 0.0051 | None reported |
| High | CVE-2026-2648 | Chromium: CVE-2026-2648 Heap buffer overflow in PDFium | 8.8 | 0.0046 | None reported |
| High | CVE-2026-3542 | Chromium: CVE-2026-3542 Inappropriate implementation in WebAssembly | 8.8 | 0.0040 | None reported |
| High | CVE-2026-3544 | Chromium: CVE-2026-3544 Heap buffer overflow in WebCodecs | 8.8 | 0.0035 | None reported |
| High | CVE-2026-3540 | Chromium: CVE-2026-3540 Inappropriate implementation in WebAudio | 8.8 | 0.0034 | None reported |
| High | CVE-2026-3543 | Chromium: CVE-2026-3543 Inappropriate implementation in V8 | 8.8 | 0.0033 | None reported |
| High | CVE-2026-3541 | Chromium: CVE-2026-3541 Inappropriate implementation in CSS | 8.8 | 0.0029 | None reported |
| High | CVE-2026-2321 | Google Chrome: Use after free | 8.8 | 0.0029 | None reported |
| High | CVE-2026-2319 | Chromium: CVE-2026-2319 Race in DevTools | 7.5 | 0.0022 | None reported |
| Routine | CVE-2026-2316 | Chromium: CVE-2026-2316 Insufficient policy enforcement in Frames | 6.5 | 0.0027 | None reported |
| Routine | CVE-2026-2318 | CVE-2026-2318 | 6.5 | 0.0027 | None reported |
| Routine | CVE-2026-2320 | Chromium: CVE-2026-2320 Inappropriate implementation in File input | 6.5 | 0.0025 | None reported |
| Routine | CVE-2026-2322 | Chromium: CVE-2026-2322 Heap buffer overflow in Codecs | 5.4 | 0.0025 | None reported |
| Routine | CVE-2026-2323 | Chromium: CVE-2026-2323 Inappropriate implementation in Downloads | 4.3 | 0.0025 | None reported |
| Routine | CVE-2026-2317 | Chromium: CVE-2026-2317 Inappropriate implementation in Animation | 6.5 | 0.0024 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.