CriticalCVE
Google Releases Major Chrome Security Update Fixing 213 Bugs, Including 7 Critical Vulnerabilities
Cyber Security News·Source published ·1 min read
What happened?
Google has released Chrome 157 for Windows, macOS, and Linux, fixing 213 security bugs, including seven rated critical. Announced on November 3, 2026, the update addresses flaws across graphics, memory handling, browser features, and access controls. Google says the stable release will reach users over the coming days and weeks. The patched versions are 157.0.8103.38 for Linux and 157.0.8103.38/.39 for Windows and macOS.
Key details
- Google released Chrome 157 for Windows, macOS, and Linux on November 3, 2026, fixing 213 security bugs including seven rated critical.
- Two critical buffer overflow vulnerabilities were fixed in Dawn, Chrome's WebGPU implementation, with one reported by Zhenpeng Lin and the other by Google.
- A critical memory corruption flaw in ANGLE was reported by researcher @mfx on September 17 and received a $1,000 reward.
- Four critical use-after-free vulnerabilities affect WebGL, Prerender, Geometry, and Core components, reported by Google researchers and external researchers.
- The Prerender vulnerability credit specifically mentions Xinyang Ge at Anthropic assisted by Claude, documenting AI-assisted research.
- High-severity issues were also patched including authorization flaws in BackgroundFetch, memory access issues in ANGLE, type confusion in V8, and memory flaws in PDFium and Media.
Affected
- Chrome versions prior to 157.0.8103.38 on Linux and 157.0.8103.38/.39 on Windows and macOS are affected.
Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.
