Google Chrome 157 Released With 213 Security Fixes
Google Chrome 157 fixes 213 vulnerabilities including 7 critical ones; gradual rollout continues.
75
Vulnerability1 · 1 read
CVE-2026-121126
Use-after-free in Google Chrome before 157.0.8103.38
- CVSS 3.1
- 9.6 critical
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A use-after-free in Google Chrome's Core permits remote code execution outside the sandbox via a crafted HTML page. User interaction is required to trigger the flaw. Any Chrome user who visits a malicious site can be exploited. Google Chrome users are affected.
What to do: Upgrade to Chrome 157.0.8103.38. No workaround is listed.
| Product | Affected | Fixed in |
|---|---|---|
| Google Chrome | prior to 157.0.8103.38 | 157.0.8103.38 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
In the news
2 storiesGoogle Releases Chrome 157 Fixing 213 Bugs
Chrome 157 fixes 213 security bugs including 7 critical memory safety issues across graphics and browser components, with rollout ongoing.
75