Advisories

Stable Channel Update for Desktop

The Stable channel has been updated to 157.0.8103.78/.79 for Windows and Mac and 157.0.8103.78 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log . Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed. This update includes 83 security fixes. Please see the Chrome Security Page for more information. [N/A][ 568699166 ] Critical CVE-2026-126885: Use after free in ServiceWorker. <span style="background-color:

Read at Google Chrome Releases

Vendor

Google

• Google Chrome Releases (chromereleases.googleblog.com)
• CVE-2026-126885 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-126895 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-126879 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-126846 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-126911 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 26
   CVE NVD 2h ago

   Use after free in BrowserTag in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a…

   CVE-2026-126919 Google
2. 26
   CVE NVD 2h ago

   Integer overflow in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…

   CVE-2026-126916 Google
3. 26
   CVE NVD 2h ago

   Buffer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted…

   CVE-2026-126912 Google
4. 26
   CVE NVD 2h ago

   Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a…

   CVE-2026-126911 Google
5. 26
   CVE NVD 2h ago

   Use after free in Passwords in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code…

   CVE-2026-126909 Google
6. 26
   CVE NVD 2h ago

   Improper state validation in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a…

   CVE-2026-126903 Google
7. 26
   CVE NVD 2h ago

   Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…

   CVE-2026-126895 Google
8. 26
   CVE NVD 2h ago

   Off-by-one error in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…

   CVE-2026-126889 Google
9. 32
   CVE NVD 2h ago

   Use after free in Animation in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a…

   CVE-2026-126887 Google
10. 26
    CVE NVD 2h ago

    Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…

    CVE-2026-126886 Google
11. 26
    CVE NVD 2h ago

    Use after free in ServiceWorker in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a…

    CVE-2026-126885 Google
12. 32
    CVE NVD 2h ago

    Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…

    CVE-2026-126879 Google
13. 26
    CVE NVD 2h ago

    Information leak in Core in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

    CVE-2026-126878 Google
14. 26
    CVE NVD 2h ago

    Uninitialized resource in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted…

    CVE-2026-126870 Google
15. 26
    CVE NVD 2h ago

    Use after free in DOM in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…

    CVE-2026-126865 Google
16. 26
    CVE NVD 2h ago

    Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…

    CVE-2026-126864 Google
17. 32
    CVE NVD 2h ago

    Link following in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary…

    CVE-2026-126859 Google
18. 26
    CVE NVD 2h ago

    Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read…

    CVE-2026-126853 Google
19. 26
    CVE NVD 2h ago

    Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…

    CVE-2026-126847 Google
20. 26
    CVE NVD 2h ago

    Use after free in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox…

    CVE-2026-126846 Google