Mmastodon TechnologyCybersecurity first seen 12 h ago, last 12 h ago, peak #5

Google Chrome patches critical memory flaw

Original: 🚨 EUVD-2026-89143 📊 Score: 9.6/10 (CVSS v3.1) 📦 Product: Chrome 🏢 Vendor: Google 📅 Published: 2026-09-29 | Updated: 2026

A critical vulnerability, EUVD-2026-89143, has been disclosed in Google Chrome with a CVSS score of 9.6. The flaw involves non-heap memory handling in the browser's Fonts component and could allow a remote attacker, working alongside social engineering, to potentially compromise systems. The fix is included in Chrome 154.0.8037.57, published 29 September 2026 and updated the following day. Security watchers are flagging the severity rating and urging users to update their browsers promptly.

Why now: The very high CVSS score and the need for Chrome users to update immediately are drawing attention in cybersecurity circles.

Google ChromeGoogleENISA EUVD database

Open on mastodon →

Evidence

• 🚨 EUVD-2026-89143 📊 Score: 9.6/10 (CVSS v3.1) 📦 Product: Chrome 🏢 Vendor: Google 📅 Published: 2026-09-29 | Updated: 2026-09-30 📝 Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially… · EUVD_Bot · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/449129