Google has moved Chrome 157 to the stable channel for Windows, macOS and Linux, delivering 213 security fixes, including seven critical memory-safety vulnerabilities. The rollout is expected to take place over the coming days and weeks, according to Google’s Chrome release notice.
The critical fixes address CVE-2026-121156 and CVE-2026-121247 in Dawn, CVE-2026-121229 in ANGLE, CVE-2026-121246 in WebGL, CVE-2026-121035 in Prerender, CVE-2026-121203 in Geometry, and CVE-2026-121126 in Core.
The issues include buffer overflows, memory corruption and use-after-free defects. Google credited a $10,000 reward for the Dawn buffer overflow and $1,000 for the ANGLE memory-corruption flaw. Anthropic researcher Xinyang Ge reported the Prerender flaw with assistance from Claude.
The desktop release is Chrome 157.0.8103.38 for Linux and 157.0.8103.38/.39 for Windows and macOS. Google said details and links for some bugs may remain restricted until most users have received the fixes. The release follows Google’s earlier emergency patch for CVE-2025-6558, an actively exploited Chrome flaw.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
