Common software, what the update fixes, and one sourced severity score to help you understand why it matters.
Scores apply to the named representative CVE—not the entire bundled update. This archive is a reading aid, not a replacement for vendor guidance or an organization's patch process.
Patch deskCat checks the browser. Owl reads the CVE. Panda schedules the restart.
Verified entries
Browsers and operating systems
Start with the product you use. Follow the vendor's normal update path rather than downloading an update from an unexpected message or search ad.
Checked September 4, 2026
Browser
Google Chrome
152.0.7977.82/.83
8.8High
What it fixes
The highlighted issue, CVE-2026-85046, was a type-confusion flaw in Chrome's V8 JavaScript engine. Google says an exploit for it exists in the wild.
What to do
Open Chrome's About screen to check for updates and restart the browser to finish applying the current Stable channel release.
Released CVE-2026-85046CVSS 3.1 · CISA-ADP via NVD
Representative score for the highlighted V8 CVE, not a score for the complete Chrome release. Google classifies the flaw as high severity and says it is being exploited in the wild.
One highlighted issue, CVE-2026-84119, was a use-after-free flaw in browser navigation that could allow a sandbox escape. Mozilla fixed it in Firefox 155 and supported Firefox ESR releases.
What to do
Open Firefox's About screen to trigger the update, then restart the browser if your managed update policy has not already installed it.
Released CVE-2026-84119CVSS 3.1 · CISA-ADP via NVD
Representative score for the highlighted sandbox-escape CVE, not a score for the complete Firefox release. Mozilla classifies the flaw as high impact.
One highlighted issue, CVE-2026-76034, was a WebGL buffer overflow. Google says a crafted HTML page could allow remote code execution outside the browser sandbox before Chrome 151.0.7922.169.
What to do
Open Chrome’s About screen to check for updates and restart the browser to finish applying the current Stable channel release.
Released CVE-2026-76034CVSS 3.1 · CISA-ADP via NVD
Representative CVSS score for the highlighted WebGL CVE, not a score for the complete Chrome release. Google classifies the flaw as critical.
One highlighted issue, CVE-2026-68820, was a use-after-free flaw in the Windows Ancillary Function Driver for WinSock. Microsoft says an authorized local attacker could use it to elevate privileges.
What to do
Use Windows Update or your organization’s approved update channel, then confirm the device reached the fixed build for its Windows release.
Released CVE-2026-68820CVSS 3.1 · Microsoft CNA via NVD
Representative score for the highlighted WinSock-driver CVE, not a score for the complete Windows cumulative update.
One highlighted WebKit issue, CVE-2026-64730, could allow framed malicious web content to create a user-interface spoof. Apple says the issue was addressed through improved UI handling.
What to do
Install iOS or iPadOS 26.6 through the device’s normal Software Update screen when it is available for your model.
Released CVE-2026-64730CVSS 3.1 · CISA-ADP via NVD
Representative score for the highlighted WebKit CVE, not a score for the complete Apple update.
One highlighted issue, CVE-2026-16349, was a same-origin policy bypass in Firefox’s navigation component. Mozilla fixed it in Firefox 153 and supported ESR releases.
What to do
Open Firefox’s About screen to trigger the update, then restart the browser if your managed update policy has not already installed it.
Released CVE-2026-16349CVSS 3.1 · CISA-ADP via NVD
Representative score for the highlighted same-origin-policy CVE, not a score for the complete Firefox release.
One highlighted issue, CVE-2026-15899, was a use-after-free flaw in Camera Capture that could potentially support a sandbox escape on macOS through a crafted webpage.
What to do
Open Chrome’s About screen to check for updates and restart the browser to finish applying the current Stable channel release.
Released CVE-2026-15899CVSS 3.1 · CISA-ADP via NVD
Representative score for the highlighted Camera Capture CVE, not a score for the complete Chrome release.
One highlighted issue, CVE-2026-50458, was a use-after-free flaw in the Windows Brokering File System that could allow a locally authenticated attacker to elevate privileges.
What to do
Use Windows Update or your organization’s approved update channel, then confirm the device reached the fixed build for its Windows release.
Released CVE-2026-50458CVSS 3.1 · Microsoft CNA via NVD
Representative score for the highlighted Brokering File System CVE, not a score for the complete Windows cumulative update.
