Google Chrome 153 Update Fixes 42 Security Flaws, Including 3 Critical Ones
Google shipped Chrome 153 fixing 42 vulnerabilities, including three Critical use-after-free and out-of-bounds bugs, with no active exploitation reported.
Google's Chrome 153 Stable channel update (153.0.8010.47/.48 for Windows/macOS, 153.0.8010.47 for Linux) patches 42 vulnerabilities: three Critical, 27 High, ten Medium, and one Low. The Critical flaws are CVE-2026-91721 (use-after-free in Internals), CVE-2026-91749 (use-after-free in Workers), and CVE-2026-91726 (out-of-bounds read in WebGL). Google's bulletin states none of the patched issues are actively exploited, and detailed bug links remain restricted until most users receive the fixes. Bug bounty awards include $1,500 to Hafiizh for CVE-2026-91724 and $1,000 to Jihyeon Jeong of Seoul National University for CVE-2026-91728.
- Chrome 153 patches 42 flaws: 3 Critical, 27 High, 10 Medium, 1 Low
- Critical bugs: use-after-free in Internals and Workers, WebGL out-of-bounds read
- No active exploitation indicated in Google's advisory
- High-severity fixes span V8, Skia, DOM, ServiceWorker, PDF, Auth, Extensions
- Users and enterprises should update to 153.0.8010.47/.48 and relaunch promptly
- CVEs
- CVE-2026-91721CVE-2026-91749CVE-2026-91726CVE-2026-91724CVE-2026-91728CVE-2026-91734CVE-2026-91727CVE-2026-91743CVE-2026-91744CVE-2026-91712CVE-2026-91748CVE-2026-91720CVE-2026-91731CVE-2026-91747CVE-2026-91733CVE-2026-91741CVE-2026-91709CVE-2026-91717CVE-2026-91735CVE-2026-91708CVE-2026-91736CVE-2026-91740CVE-2026-91710CVE-2026-91718CVE-2026-91716CVE-2026-91746CVE-2026-91729CVE-2026-91737CVE-2026-91711CVE-2026-91715
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-91710 | Use-After-Free in Google Chrome WebAppInstalls Allows Sandbox Escape RCE | 9.6 group max | — |
From the original article
4 min read at cybersecuritynews.com
Google has released an important Chrome 153 security update that fixes 42 vulnerabilities across the browser, including three bugs rated Critical. The Stable channel is moving to 153. 0.
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.