Google has released stable version 157 of the Chrome browser. The update, which began rolling out on November 3, fixes 213 security vulnerabilities. Seven of them are critical, and 77 are in the high-risk group.
Which versions are available
Version 157.0.8103.38/.39 for Windows and Mac, and version 157.0.8103.38 for Linux, are available for download. On Android, Chrome 157 (157.0.8103.38) will roll out via Google Play within a few days. Google says the Android version includes the same security fixes as the desktop version.
Which critical vulnerabilities are included
Two of the seven critical vulnerabilities are in the Dawn graphics layer: CVE-2026-121156 and CVE-2026-121247, classified as buffer overflows. These bugs can lead to code execution outside the browser sandbox. CVE-2026-121229 was recorded as memory corruption in ANGLE.
The remaining critical bugs are use-after-free errors: CVE-2026-121035 in Prerender, CVE-2026-121246 in WebGL, CVE-2026-121203 in Geometry, and CVE-2026-121126 in Core. The list also includes 75 medium-risk and 54 low-risk vulnerabilities.
Bugs found with AI assistance
One notable aspect of the list is that some of the bugs were found with AI assistance. In 21 of the 213 entries, the reporting researcher says they worked with Claude or OpenAI Codex Security. For example, the critical Prerender vulnerability was reported by Xinyang Ge from Anthropic with Claude’s support. Claude assistance appears in 14 entries, and the OpenAI Codex Security signature appears in 7 entries. 130 of the entries come from Google’s own security team.
Google rewarded researchers
Zhenpeng Lin from depthfirst was paid $10,000 for the Dawn vulnerability, and a researcher using the alias @mfx was paid $1,000 for the ANGLE vulnerability. The reward amounts for the other critical bugs were not disclosed.
What to do
Chrome usually downloads the update on its own, but this can be delayed if the browser stays open for weeks. Type chrome://settings/help in the address bar and check the version number; if an update is ready, a “Relaunch” button appears. On Android, you can also manually start the update from the Chrome page in the Play Store.
Google’s announcement does not state that these vulnerabilities are being actively exploited. Still, because critical-class bugs can be used to execute code through the browser, you should not delay the update.
Source: Chrome Releases
Share your experience
Bir sorunun, farklı bir çözümün veya eklemek istediğin bir notun var mı? Giriş yapmadan da yazabilirsin.