Overview
- Google released patched desktop builds of Chrome (notably 157.0.8103.50/51 and later 157.0.8103.78/79) that address nine vulnerabilities, with most rated high severity by the company.
- One flaw, CVE‑2026‑125350, is a Use‑After‑Free bug in XML that security databases say can be triggered by a crafted webpage to enable remote code execution.
- Google is limiting technical details to reduce follow‑on attacks and is urging desktop users to install the update immediately by visiting Chrome menu → Help → About Google Chrome.
- Because many browsers share the Chromium codebase, vendors such as Microsoft Edge, Brave, Vivaldi and Opera are expected to roll out corresponding patches in the coming days, expanding who must update.
- Chrome’s large market share and Google’s faster two‑week update cadence mean timely patching matters for millions of users, and Google has also published broader updates that list additional fixes and an Android package with the same corrections.