Google Chrome 157 Released With 213 Security Fixes
Google Chrome 157 fixes 213 vulnerabilities including 7 critical ones; gradual rollout continues.
75
CVE-2026-121156
Buffer overflow in Google Chrome Dawn prior to 157.0.8103.38
- CVSS 3.1
- 9.6 critical
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Buffer overflow in Dawn renderer of Google Chrome prior to version 157.0.8103.38. Remote attacker triggers via crafted HTML page with user interaction. Attacker gains arbitrary code execution outside the sandbox. Affects all Google Chrome users on affected versions.
What to do: Upgrade to Chrome 157.0.8103.38. No workaround listed.
| Product | Affected | Fixed in |
|---|---|---|
| Google Chrome | prior to 157.0.8103.38 | 157.0.8103.38 |
Estimated exposure
largeNo basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
In the news
3 storiesChrome 157 patches 213 security issues including 7 critical flaws
Chrome 157.0.8103.39 fixes seven critical flaws including memory corruption in ANGLE for Android allowing potential remote code execution.
75
Google Releases Chrome 157 Fixing 213 Bugs
Chrome 157 fixes 213 security bugs including 7 critical memory safety issues across graphics and browser components, with rollout ongoing.
75