Chrome 157 fixes 83 flaws, five critical use-after-frees
Original title: Google Chrome Fixes 83 Security Flaws, Including 5 Critical Use-After-Free Vulnerabilities
The Stable Channel update does not say these new flaws are being exploited; bug details may stay restricted.
Google’s November 11, 2026 Stable Channel update for desktop Chrome fixes 83 vulnerabilities, including five critical use-after-free bugs in ServiceWorker, CSS, Layout, Skia, and Accessibility. Windows and macOS move to 157.0.8103.78/.79 and Linux to 157.0.8103.78. The supplied advisory does not say attackers are exploiting these newly disclosed flaws. Google may keep detailed reports restricted until most users are updated.
Unconfirmed: The advisory does not say these flaws are exploited, have public exploits, or bypass the sandbox.
- Critical IDs are CVE-2026-126885, CVE-2026-126895, CVE-2026-126879, CVE-2026-126846, and CVE-2026-126911.
- High-severity issues also affect V8, ANGLE, Network, SiteIsolation, Extensions, and Media.
- CVE-2026-126864, a V8 use-after-free, carried a $4,000 reward.
- Credits include Anthropic researchers assisted by Claude and OpenAI Codex Security.
- Users should update from About Google Chrome and relaunch the browser.
Impact: Memory corruption that may crash, leak data, or enable code execution
| Product | Affected | Fixed in |
|---|---|---|
| Google Chrome | — | 157.0.8103.78/.79 on Windows and macOS; 157.0.8103.78 on Linux |
- 1.Update Chrome to 157.0.8103.78/.79 on Windows and macOS, or 157.0.8103.78 on Linux, then relaunch.
- 2.Administrators should verify deployed versions rather than assume automatic updates finished.
- CVEs
- CVE-2026-126840CVE-2026-126841CVE-2026-126842CVE-2026-126843CVE-2026-126844CVE-2026-126845CVE-2026-126846CVE-2026-126847CVE-2026-126848CVE-2026-126849CVE-2026-126850CVE-2026-126851CVE-2026-126852CVE-2026-126853CVE-2026-126854CVE-2026-126855CVE-2026-126856CVE-2026-126857CVE-2026-126858CVE-2026-126859CVE-2026-126860CVE-2026-126861CVE-2026-126862CVE-2026-126863CVE-2026-126864CVE-2026-126865CVE-2026-126866CVE-2026-126867CVE-2026-126868CVE-2026-126869
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-126842 | Use-after-free in Chrome ANGLE via crafted HTML | 9.6 group max | — | ||
CVE-2026-126846+2 related CVEs | Use-after-free in Skia in Chrome on Android before 157.0.8103.78 | 9.6 group max | — |
From the original article
9 min read at gbhackers.com
Google released a Chrome desktop security update that addresses 83 vulnerabilities, including five critical use-after-free flaws affecting ServiceWorker, CSS, Layout, Skia, and Accessibility. Published November 11, 2026, the release upgrades Windows and macOS installations to versions 157. 0.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.