Four critical use-after-free fixes; 20 high-severity patches

A new LTS-144 version 144.0.7559.256(Platform Version: 16503.88.0), is being rolled out for most ChromeOS devices.

This version includes selected security fixes including:

519258799

High

CVE-2026-12034

Insufficient validation of untrusted input

499449324

High

CVE-2026-7922

Use after free in ServiceWorker

523677844

Critical

CVE-2026-13033

Out of bounds read in Blink>InterestGroups

506653647

High

CVE-2026-9970

Use after free in WebGL

511765713

High

CVE-2026-10969

Insufficient validation of untrusted input in Extensions

513609324

High

CVE-2026-10003

Use after free in Views

501575979

High

CVE-2026-9933

Use after free in Input

513208588

High

CVE-2026-9993

Use after free in Views

504710769

High

CVE-2026-9961

Use after free in SurfaceCapture

513256572

High

CVE-2026-9995

Use after free in WebXR

519728275

Critical

CVE-2026-12439

Use after free in Digital Credentials

487357841

High

CVE-2026-10905

Use after free in Network on Android)

502978647

High

CVE-2026-8557

Use after free in Accessibility

498783665

High

CVE-2026-9903

Insufficient validation of untrusted input in Site Isolation

493957495

Medium

CVE-2026-7339

Heap buffer overflow in WebRTC

504629701

High

CVE-2026-8559

Integer overflow in Internationalization

499891888

High

CVE-2026-6920

Out of bounds read in GPU

499565267

High

CVE-2026-8524

Out of bounds write in WebAudio

513754619

High

CVE-2026-10007

Use after free in SVG

516942828

Critical

CVE-2026-12008

Use after free

519731619

Critical

CVE-2026-12440

Use after free in DigitalCredentials

497880137

High

CVE-2026-6360

Use after free in FileSystem

520157118

Critical

CVE-2026-12441

Use after free in File Input

500104917

High

CVE-2026-7348

Use after free in Codecs

Release notes for LTS-144 can be found here

Want to know more about Long-term Support? Click here

Andy Wu
Google Chrome OS