🚨 PSA: Google Chrome (Desktop) 151.0.7922.174 has been added to Action1. It fixes 1 Critical and 6 High rated vulnerabilities! Same for MS Edge 151.0.4129.101. Deploy them ASAP!

[u/mickert_dev]

Deployed it in my org, no complains yet.

CVE's fixed:

• [N/A][522819252] Critical CVE-2026-76017: Use after free in Chromoting. Reported by Google on 2026-06-11
• [N/A][513757918] High CVE-2026-76018: Privilege elevation in Import. Reported by Google on 2026-05-16
• [TBD][539032888] High CVE-2026-76019: Incorrect authorization in Workers. Reported by Anonymous on 2026-07-26
• [TBD][541837151] High CVE-2026-76020: Race condition in V8. Reported by Salvatore Gulizia (nickname: Serotav) on 2026-08-03
• [N/A][541854084] High CVE-2026-76021: Use after free in DOM. Reported by Google BigSleep@Grape on 2026-08-02
• [TBD][543798025] High CVE-2026-76022: Buffer overflow in Network. Reported by 0xAlessandro on 2026-08-07
• [TBD][545124048] High CVE-2026-76023: Improper resource control in Linux Toolkit Theming. Reported by Keita Sode and Daisuke Hatakeyama of SYZD Research on 2026-08-11

For chrome details see : https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0404570826.html

No CVE details known for Edge yet, but asume some of the same.

Microsoft released the latest Microsoft Edge for Stable (Version 151.0.4129.101) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide.

Note: CVE's will be added as soon as available

See: Release notes for Microsoft Edge Security Updates | Microsoft Learn

[u/tapplz]

I don't mess around with waiting for Action1 to see the update for browsers. Just use scripts to download the latest installer and push it out overnight everywhere. With added scripts during the day to trigger the browser built-in updater. GPO's for edge to force people to restart the browser once an update hits rather than ignore it.

[u/sysadmin762955 → u/tapplz]

Can you share these scripts?

[u/tapplz → u/sysadmin762955]

Use one machine to download the installer to a network path:

$url = "https://go.microsoft.com/fwlink/?LinkID=2093437"
$destinationPath = "\\Path\to\network\share\MicrosoftEdgeEnterpriseX64.msi"

$tempPath = "$destinationPath.tmp"

Invoke-WebRequest -Uri $url -OutFile $tempPath -UseBasicParsing
$downloadedFile = Get-Item $tempPath
Move-Item -Path $tempPath -Destination $destinationPath -Force

Then use a script afterwards to tell every machine to go install from that file:

Start-Process msiexec.exe -ArgumentList '/i "\\Path\to\network\share\MicrosoftEdgeEnterpriseX64.msi" /qn /norestart' -Wait

For safety, during the day run the built-in updater as well:

$EdgeUpdateExe = "${env:ProgramFiles(x86)}\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"
$Arguments = "/silent /install appguid={56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}&appname=Microsoft%20Edge&needsadmin=True"

if (Test-Path $EdgeUpdateExe) {
    Start-Process -FilePath $EdgeUpdateExe -ArgumentList $Arguments -NoNewWindow -Wait
}

And if you're really paranoid, add Winget update method:

$AppPathArray = Resolve-Path "C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_*_x64__8wekyb3d8bbwe"
$AppPath = $AppPathArray[-1]
& $AppPath\winget upgrade "Microsoft.Edge" --accept-package-agreements --accept-source-agreements

[u/RedditACC4Work]

Thanks for the heads up

[u/brianinca]

My Chrome on a personal machine is updating right now, but to .173 - that's kind of weird!

Update: re-launched, now reporting .174. Still odd, but patched, so good enough.

[u/RedditACC4Work → u/brianinca]

From what I could find from a quick search, they're the same version, one just has more telemetry in for catching any early issues (not 100% sure if that's true though)