Chrome 157 Arrives with 213 Security Fixes, Including Seven Critical Flaws

Google has released Chrome 157 for desktop with 213 security fixes. Its 3 November announcement lists seven critical vulnerabilities, including memory-safety bugs in graphics components and other browser code.

The Stable versions are 157.0.8103.38 for Linux and 157.0.8103.38 or 157.0.8103.39 for Windows and Mac. Google says distribution will take place over the coming days and weeks.

Critical examples include CVE-2026-121156 and CVE-2026-121247, both buffer overflows in Dawn; CVE-2026-121229, memory corruption in ANGLE; and CVE-2026-121246, a use-after-free issue in WebGL. The remaining critical entries concern Prerender, Geometry and Core.

The release does not report exploitation in the wild. That leaves exploitation status unconfirmed by this announcement. Google also warns that access to bug details can remain restricted while users and affected third-party projects receive fixes.

Check the version, then finish the update

For users, the useful next step is a version check. Google’s update instructions direct desktop users to the three-dot menu, then Help → About Google Chrome. That page displays the installed version and checks for available updates.

If Chrome offers Relaunch, select it to apply the update. Google explains that background updates normally complete when the browser closes and reopens; a browser left running can have an update waiting.

Save anything important before restarting. Chrome normally restores ordinary tabs and windows, but Google notes that Incognito windows do not reopen. On Linux, use the system’s package manager to update Chrome. Check the version again after restarting so the check reflects the browser now running.

Latest articles

Related articles