Google patches Chrome 157 to fix 213 security bugs, seven rated critical
- Severity
- Critical
- Sources
- 1
What happened
Chrome 157 (157.0.8103.38 on Linux; 157.0.8103.38/.39 on Windows and macOS) fixes 213 security bugs, seven rated critical: CVE-2026-121156 and CVE-2026-121247 (Dawn buffer overflows), CVE-2026-121229 (ANGLE memory corruption), and use-after-free flaws CVE-2026-121246 (WebGL), CVE-2026-121035 (Prerender), CVE-2026-121203 (Geometry) and CVE-2026-121126 (Core). The advisory does not state active exploitation, proof-of-concept code or attack chains, so severity should not be read as confirmed code execution or sandbox escape. Defenders should deploy the patched builds and verify that browsers report the updated version.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Update Chrome to 157.0.8103.38 on Linux, or 157.0.8103.38/.39 on Windows and macOS.
- Confirm that browsers in use are running the updated version.
- Prioritise the update on systems used for browsing, since the release includes seven critical flaws.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Who and what is in it
Companies
Products