Skip to content
Google Chrome 157 Fixes 213 Vulnerabilities, Including 7 Critical Flaws

Google Chrome 157 Fixes 213 Vulnerabilities, Including 7 Critical Flaws

First seen 5 Nov 2026, 18:17 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 5, 2026 at 18:18 UTC
  • •Chrome 157 patches 213 vulnerabilities, including 7 critical flaws.
  • •Critical vulnerabilities involve buffer overflows and memory corruption.
  • •AI tools contributed to the discovery of several vulnerabilities.

On November 3, 2026, Google released Chrome 157, addressing 213 security vulnerabilities, including seven rated as critical. The critical flaws affect components like Dawn and ANGLE, with notable issues including buffer overflows and memory corruption. Users are urged to update their browsers promptly as the rollout is gradual. The vulnerabilities have not been reported as, but their severity necessitates immediate attention. AI tools played a significant role in identifying some of these vulnerabilities, with 14 reports credited to AI-assisted research. The update is available for Windows, macOS, and Linux, with an Android version also released. Google has awarded $31,000 in bug bounties for reported vulnerabilities, although many rewards remain undetermined.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 5d ago How this analysis works

Timeline

2026-11-03
Chrome 157 released
Google released Chrome 157, fixing 213 vulnerabilities, including 7 critical ones affecting various components.
Esecurityplanet
2026-11-03
CVE-2026-121156 published
A critical buffer overflow vulnerability in Dawn was disclosed, reported by Zhenpeng Lin.
Esecurityplanet
2026-11-03
CVE-2026-121229 published
A critical memory corruption vulnerability in ANGLE was disclosed, reported by researcher @mfx.
Esecurityplanet
2026-11-03
CVE-2026-121035 published
A critical use-after-free vulnerability in Prerender was disclosed, reported by Anthropic's Xinyang Ge with AI assistance.
Finance.Biggo

More articles in this cluster (2)

Following this threat?

Track CVE-2026-121035 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 2

Common questions

Which versions of Chrome are affected?
Chrome 157 is the latest version, and users should update from earlier versions to mitigate vulnerabilities.
Have these vulnerabilities been exploited?
No evidence of active exploitation has been reported for the vulnerabilities in Chrome 157.
How can users update their browsers?
Users can manually update Chrome from the settings menu or wait for the gradual rollout.