Advisories

Long Term Support Channel Update for ChromeOS

A new LTS-150 version 150.0.7871.289 (Platform Version: 16700.70.0), is being rolled out for most ChromeOS devices. This version includes selected security fixes including: 579818899 High CVE-2026-126901 Use after free in PDF 577260644 High CVE-2026-126856 Incomplete cleanup in Cache 567611698 High CVE-2026-126887 Use after free in Animation 576169244 High CVE-2026-121182 Use after free in DOM 563340397 <span style="font-family: Arial, sans-serif; font-size: 11pt; font-variant: normal; font-weight: 700; vertical-align: baseline; white-space: pre-wrap;"&

Read at Google Chrome Releases

Vendor

Google

Product

ChromeOS

Exposure class

Operating system

• Google Chrome Releases (chromereleases.googleblog.com)
• CVE-2026-126901 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-126856 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-126887 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-121182 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-126859 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 26
   CVE NVD 2h ago

   Use after free in PDF in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…

   CVE-2026-126901 Google
2. 26
   CVE NVD 2h ago

   Use after free in Animation in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a…

   CVE-2026-126887 Google
3. 26
   CVE NVD 2h ago

   Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…

   CVE-2026-126879 Google
4. 26
   CVE NVD 2h ago

   Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…

   CVE-2026-126869 Google
5. 26
   CVE NVD 2h ago

   Use after free in HTML in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…

   CVE-2026-126863 Google
6. 26
   CVE NVD 2h ago

   Link following in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary…

   CVE-2026-126859 Google
7. 26
   CVE NVD 2h ago

   Incomplete cleanup in Cache in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

   CVE-2026-126856 Google
8. 29
   Chrome release Chrome Releases 5h ago

   Extended Stable Update for Desktop

   CVE-2026-126879CVE-2026-126885CVE-2026-126895+57 more Google
9. 29
   Chrome release Chrome Releases 5h ago

   Stable Channel Update for Desktop

   CVE-2026-126885CVE-2026-126895CVE-2026-126879+57 more Google
10. 38
    ISC diary SANS ISC 30h ago

    Microsoft Patch Tuesday November 2026

    Fix available CVE-2026-124194CVE-2026-119958CVE-2026-109459+57 more Microsoft Google
11. 26
    Chrome release Chrome Releases 2d ago

    Extended Stable Update for Desktop

    CVE-2026-121068CVE-2026-121076CVE-2026-121095+8 more Google
12. 36
    Advisory MSRC 7d ago

    Chromium CVE-2026-119267: Memory corruption

    Fix available CVE-2026-119267 Microsoft Google
13. 36
    Advisory MSRC 7d ago

    Chromium CVE-2026-119260: Use after free

    Fix available CVE-2026-119260 Microsoft Google
14. 36
    Advisory MSRC 7d ago

    Chromium CVE-2026-119270: Improper input validation

    Fix available CVE-2026-119270 Microsoft Google
15. 11
    CVE NVD 8d ago

    Uninitialized resource in Images in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML…

    CVE-2026-121213 Google
16. 11
    CVE NVD 8d ago

    Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process and…

    CVE-2026-121211 Google
17. 30
    CVE NVD 8d ago

    Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…

    CVSS 8.8 CVE-2026-121182 Google
18. 30
    CVE NVD 8d ago

    Use after free in Controls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a…

    CVSS 8.8 CVE-2026-121119 Google
19. 38
    CVE NVD 8d ago

    Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code…

    CVSS 9.6 CVE-2026-121076 Google
20. 30
    CVE NVD 8d ago

    Use after free in Modularization in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a…

    CVSS 8.8 CVE-2026-121061 Google