Google Chrome Update Fixes 83 Security Flaws, Including Five Critical Vulnerabilities

Google Chrome users have another important security update to install. Google has released a new Chrome 157 update that addresses 83 security vulnerabilities, including five rated Critical, the highest severity classification. The update arrives just two days after the company released an emergency fix for a zero day vulnerability that was reportedly being exploited in real world attacks.

The latest release, published on November 11, 2026, covers Chrome versions 157.0.8103.78 and 157.0.8103.79 for Windows and Mac, while Linux users are receiving version 157.0.8103.78. The Android version has also started rolling out through Google Play.

The timing of the release is particularly noteworthy. Chrome has received three major rounds of security fixes since November 3, highlighting how quickly new vulnerabilities can emerge in widely used browsers.

Although Google has not reported active exploitation of the 83 vulnerabilities addressed in this latest update, the presence of five Critical flaws makes installing the patch an important step for users.

Chrome 157 fixes 83 vulnerabilities, including five Critical flaws

According to Google’s Chrome Releases announcement, the November 11 update addresses 83 security issues across several browser components.

Five vulnerabilities have received a Critical severity rating. All five are classified as Use After Free vulnerabilities, a type of memory management flaw that can allow software to access memory after it has already been released.

These vulnerabilities can create opportunities for attackers to manipulate browser behaviour, potentially leading to crashes, memory corruption or more serious security problems.

The five Critical vulnerabilities affect different parts of Chrome:

1. CVE-2026-126885: A Use After Free vulnerability affecting ServiceWorker.
2. CVE-2026-126895: A Use After Free vulnerability affecting CSS.
3. CVE-2026-126879: A Use After Free vulnerability affecting Layout.
4. CVE-2026-126846: A Use After Free vulnerability affecting Skia.
5. CVE-2026-126911: A Use After Free vulnerability affecting Accessibility.

The remaining 78 vulnerabilities are classified as High severity, which is the second highest category in Google’s security assessment system.

These include other potentially serious weaknesses, such as Type Confusion vulnerabilities in the V8 JavaScript engine and Buffer Overflow issues in Skia, Chrome’s graphics and rendering library.

Google has not disclosed all the technical details surrounding the vulnerabilities. The company explained that access to information about certain security flaws may remain restricted until most users have installed the relevant fixes.

This is a common security practice designed to prevent attackers from using publicly available technical information to develop exploits before browser updates reach a wider audience.

Chrome receives another update just two days after a zero day fix

The latest security release is particularly interesting because it follows another important Chrome update released on November 9.

That earlier patch addressed CVE-2026-125350, an XML processing vulnerability for which exploit code was reportedly circulating in the wild.

Google released Chrome versions 157.0.8103.50 and 157.0.8103.51 to address nine security vulnerabilities, including the zero day issue.

The vulnerability was reported by an anonymous researcher on November 6. It was subsequently added to the US Cybersecurity and Infrastructure Security Agency’s Known Exploited Vulnerabilities catalogue on November 10.

The flaw could potentially allow an attacker to execute malicious code within the browser’s sandboxed environment by persuading a user to visit a specially crafted webpage.

Although the precise attack methods and the scale of exploitation have not been publicly established, its inclusion in CISA’s catalogue highlights the importance of applying the earlier security fix.

Chrome’s update history over the past few days looks like this:

This means Google has released three substantial rounds of fixes in just over a week.

Importantly, Google has not confirmed that the 83 vulnerabilities addressed in the November 11 release have been exploited. The confirmed exploitation disclosure relates to the earlier CVE-2026-125350 vulnerability.

How to update Google Chrome on desktop and Android

Chrome generally downloads security updates automatically, but users should not assume that the latest fixes are already active.

In many cases, the browser needs to be restarted before an update is fully installed. This is particularly important for users who leave Chrome running for several days without closing it.

Checking your browser version takes only a few moments.

On Windows and Mac, follow these steps:

1. Open Google Chrome.
2. Click the three dot menu in the upper right corner.
3. Select Help.
4. Choose About Google Chrome.
5. Allow Chrome to check for available updates.
6. If an update is downloaded, restart the browser to complete the installation.

The latest desktop versions are:

Linux users generally receive browser updates through their distribution’s package manager.

Android users can check Google Play for the latest Chrome release. Google says the Android update includes the same security fixes as the desktop release.

However, the rollout is happening gradually, meaning the update may not immediately appear on every device. If your browser does not show the latest version, check again later.

Why Chrome users should not ignore these security updates

Web browsers have become essential tools for everything from online banking and shopping to business communications and accessing sensitive personal information.

That makes browser security particularly important. A vulnerability in a widely used browser can potentially expose millions of users if attackers discover a reliable way to exploit it.

Use After Free vulnerabilities deserve particular attention because they involve weaknesses in how software handles memory. Depending on the circumstances, attackers may exploit these flaws through specially crafted webpages to trigger memory corruption and potentially execute malicious code.

The five Critical vulnerabilities addressed in this release affect different Chrome components, suggesting that the security improvements cover several areas of the browser rather than a single isolated feature.

The recent zero day disclosure adds another reason to keep Chrome updated. While the latest batch of 83 vulnerabilities has not been linked to confirmed attacks, the earlier XML processing flaw demonstrates that browser vulnerabilities can become active security threats.

For individual users, installing updates and restarting the browser are straightforward ways to reduce exposure.

Businesses and IT administrators have additional responsibilities. They should monitor Chrome versions across company devices, ensure that security patches are deployed promptly and remind employees to restart their browsers when updates are waiting.

Google’s latest release is another reminder that browser security requires continuous attention. With 83 vulnerabilities fixed in a single update and a confirmed zero day patched just days earlier, Chrome users should make checking for the latest version a priority.

Follow TechBSB For More Updates