Google Chrome 157 Addresses 213 Security Issues, Including Seven Critical Vulnerabilities
Google's latest Chrome update, version 157, resolves 213 security vulnerabilities, with seven rated as critical, including flaws in ANGLE and Prerender components.
Google has released Chrome version 157 to its stable channel for Windows, Mac, and Linux, addressing a significant number of security issues. The update, which is rolling out incrementally, includes fixes for 213 vulnerabilities, seven of which have been classified as Critical by Google.
Among the most concerning vulnerabilities is CVE-2026-121229, a memory corruption flaw within the ANGLE graphics translation layer. This vulnerability, affecting Chrome for Android, could potentially allow a remote attacker to execute code outside the browser's sandbox by tricking a user into visiting a specially crafted HTML page. Such an exploit could lead to the compromise of the underlying operating system.
Another critical flaw, CVE-2026-121035, resides in Chrome's Prerender component. This component is designed to speed up page loading by preparing web pages in the background before a user navigates to them. A use-after-free vulnerability in this area means that the browser attempts to access memory that has already been deallocated, which can lead to crashes or, more critically, provide an avenue for attackers to execute arbitrary code.
The update also addresses CVE-2026-121156, a buffer overflow vulnerability in Dawn, the component that powers WebGPU in Chrome. WebGPU allows websites to leverage the device's graphics processor for rendering and computation. A buffer overflow occurs when more data is written to a memory buffer than it can hold, potentially overwriting adjacent memory and leading to crashes or code execution.
While specific details on the remaining four critical vulnerabilities are not elaborated upon in the release notes, their classification indicates a high potential for exploitation and significant impact on user security. The sheer volume of fixes, totaling 213, underscores the ongoing challenges in securing complex web browsers against sophisticated threats.
Users are strongly encouraged to update their Chrome browsers to the latest version to protect themselves from these newly patched vulnerabilities. Automatic updates are enabled by default, but users can manually check for and apply updates by navigating to the 'About Google Chrome' section within the browser's settings or help menu.
This release highlights the continuous arms race between browser developers and malicious actors. The presence of multiple critical vulnerabilities, particularly those allowing for sandbox escapes and remote code execution, emphasizes the importance of prompt patching and robust security practices for all users. The inclusion of fixes for Chrome for Android also points to the ongoing need for comprehensive security across all platforms.
Google's commitment to addressing security flaws is evident in the regular release of patches. However, the effectiveness of these patches relies on users promptly applying them. The company provides detailed instructions on how to update Chrome across various operating systems, reinforcing the critical nature of staying up-to-date.