Google Chrome 157 Released With 213 Security Fixes
Google Chrome 157 fixes 213 vulnerabilities including 7 critical ones; gradual rollout continues.
75
Vulnerability1 · 1 read
CVE-2026-121035
Use-after-free in Google Chrome Prerender before 157.0.8103.38
- CVSS 3.1
- 9.6 critical
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A use-after-free vulnerability exists in the Prerender feature of Google Chrome. It is triggered by a remote attacker via a crafted HTML page requiring user interaction. An attacker can execute arbitrary code outside the sandbox. Affected are all users of Google Chrome prior to version 157.0.8103.38.
What to do: Upgrade Google Chrome to 157.0.8103.38 or later. No workaround mentioned.
| Product | Affected | Fixed in |
|---|---|---|
| Google Chrome | prior to 157.0.8103.38 | 157.0.8103.38 |
Estimated exposure
largeNo basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Use after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
In the news
3 storiesChrome 157 patches 213 security issues including 7 critical flaws
Chrome 157.0.8103.39 fixes seven critical flaws including memory corruption in ANGLE for Android allowing potential remote code execution.
75
Google Releases Chrome 157 Fixing 213 Bugs
Chrome 157 fixes 213 security bugs including 7 critical memory safety issues across graphics and browser components, with rollout ongoing.
75