Google Chrome Multiple Critical Vulnerabilities CVSS 9.6

Summary

CERT-Bund published advisory WID-SEC-2026-1260 disclosing critical multiple vulnerabilities in Google Chrome (versions prior to 147.0.7727.116 on Windows/Linux and prior to 147.0.7727.117 on MacOS X/Android) with a CVSS Base Score of 9.6 (critical) and Temporal Score of 8.3 (high). The advisory confirms remote attack is possible and indicates mitigations are available. Affected users on Android, Linux, MacOS X, and Windows platforms are exposed to potential sandbox bypass, arbitrary code execution, denial-of-service, and data disclosure or manipulation.

About this source

CERT-Bund is the German federal cybersecurity agency's incident response team, run by the BSI. Their advisory feed publishes vulnerability disclosures and active exploitation warnings for software in widespread enterprise use: VPN appliances, email servers, file transfer products, ERP systems, browsers, hypervisors. Around 280 advisories a month, each with a CVSS score, affected versions, and remediation guidance. The advisories are written in German but cover the same vulnerabilities that show up in CISA, NCSC-UK, and JPCERT bulletins, often hours earlier. Watch this if you patch enterprise software, run a SOC, or write detection rules. GovPing publishes each advisory with the affected vendor, CVSS score, and original CERT-Bund link.

What changed

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Related changes

Critical Microsoft Cloud Vulnerabilities, CVSS 9.9, 23rd Apr

Routine Apr 24, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity

Proxmox VE Multiple Vulnerabilities, CVSS 6.3, 23rd Apr

Routine Apr 24, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity

Critical Apache ActiveMQ Flaws Allow Remote Code Execution

Priority review Apr 24, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity