{"rewrite":{"id":"r_c39637e1322cdb6c52a026cd","clusterId":"c_ca713082bb6dba5c1d35b4fa","slug":"google-patches-32-chrome-flaws-one-rated-critical","model":"deepseek-v4-1-flash","headline":"Google Patches 32 Chrome Flaws, One Rated Critical","summary":"Google released Chrome updates for desktop and Android on September 29, fixing 32 vulnerabilities: one Critical, 25 High, one Medium, and five Low. The Critical flaw is CVE-2026-102331, a buffer overflow in ANGLE. Desktop builds Windows 154.0.8037.92/.93, macOS 154.0.8037.92/.93, and Linux 154.0.8037.92 roll out over days to weeks and can be applied manually. Android 154.0.8037.92 arrives on Google Play within a few days.","whyItMatters":"The one Critical and 25 High ratings put the update among Chrome's larger recent patch loads, and the desktop rollout being gradual means users may stay exposed until they update manually.","webCardHtml":"\u003cp\u003eThe Critical rating goes to CVE-2026-102331, a buffer overflow in ANGLE, the translation layer Chrome uses to route graphics calls. That is the only vulnerability in the batch tagged Critical. Among the 25 High severity entries are CVE-2026-102317, described as inappropriate permission management in Mojo, and CVE-2026-102312, an incorrect UI display in the Omnibox. CVE-2026-102320 carries a Medium rating for missing authentication in CORS.\u003c/p\u003e\u003cp\u003eThe Low group includes CVE-2026-102310, missing authentication in Payments, and CVE-2026-102327, incorrect authentication in WebView. Desktop users get the fix over days to weeks or through Chrome\u0026#39;s settings menu. Android users wait on Google Play.\u003c/p\u003e","blueskyPost":"The one Critical fix in this batch is a buffer overflow in ANGLE, the translation layer that routes Chrome's graphics calls to the GPU. Rendering code sits on the path a malicious page can reach.","twitterPost":"The lone Critical fix, CVE-2026-102331, is a buffer overflow in ANGLE, Chrome's GPU translation layer. That is reachable rendering code.","threadsPost":"Google rates one fix Critical among the 32: CVE-2026-102331, a buffer overflow in ANGLE, the layer that routes Chrome's graphics work to the GPU. Of all the patches shipped on September 29, the rendering pipeline is what earned the top severity.","newsletterBlurb":"Google shipped Chrome updates for desktop and Android on September 29, addressing 32 vulnerabilities. One is rated Critical, a buffer overflow in ANGLE tracked as CVE-2026-102331, with 25 more rated High. Desktop builds roll out gradually over days to weeks, and Android users get the fix through Google Play within a few days.","attributionJson":"[{\"source\":\"ASCII.jp\",\"url\":\"https://ascii.jp/elem/000/004/438/4438677/?rss\",\"title\":\"Google Chrome has a \\\"critical\\\" vulnerability\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":4856,"outputTokens":656,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1791165566,"createdAt":"2026-10-05T01:56:01.000Z","publishedAt":"2026-10-05T01:58:23.000Z","updatedAt":"2026-10-05T01:58:23.000Z"},"cluster":{"id":"c_ca713082bb6dba5c1d35b4fa","canonicalTitle":"Google Chromeに\"重大\"な脆弱性","representativeArticleId":"a_fb548d5ac933fa4e6dbffab8","sourceCount":1,"writtenSourceCount":1,"writeAttempts":0,"isSolo":true,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[],\"studios\":[],\"people\":[],\"type\":\"other\",\"domain\":\"other\",\"is_roundup\":false}","contentType":"news","status":"published","firstSeenAt":"2026-09-30T07:50:00.000Z","lastSeenAt":"2026-09-30T07:50:00.000Z","updatedAt":"2026-10-05T01:58:22.000Z"},"attribution":[{"source":"ASCII.jp","url":"https://ascii.jp/elem/000/004/438/4438677/?rss","title":"Google Chromeに\"重大\"な脆弱性"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":[],"studios":[],"people":[],"type":"other","domain":"other","is_roundup":false},"keyFacts":null}