Google Chrome 153 Released With Fixes for 42 Security Vulnerabilities
Google shipped Chrome 153 to the Stable channel fixing 42 vulnerabilities, including three critical flaws in WebGL, Internals, and Workers; no exploitation reported.
Google released Chrome 153 (153.0.8010.47/48) for Windows, macOS, and Linux, patching 42 security vulnerabilities including three rated critical: CVE-2026-91726 (out-of-bounds read in WebGL), CVE-2026-91721 (use-after-free in Internals), and CVE-2026-91749 (use-after-free in Workers). Twenty-eight fixes are rated high severity, covering use-after-free, type confusion, race condition, integer overflow, and authorization flaws across components like V8, Skia, DOM, ServiceWorker, PDF, and Extensions. Google's bulletin indicates no vulnerabilities are currently being exploited in the wild, and external researchers earned rewards up to $1,500 for reported issues. Enterprises are advised to verify fleet-wide deployment via browser-management consoles and enable automatic updates.
- Chrome 153 patches 42 vulnerabilities, three critical: WebGL out-of-bounds read and UAFs in Internals and Workers.
- No in-the-wild exploitation indicated by Google's bulletin, but critical UAFs can enable code execution or sandbox escape.
- Twenty-eight high-severity fixes span V8, Skia, DOM, ServiceWorker, PDF, Auth, and Extensions components.
- External researchers received bounties up to $1,500; many rewards still marked TBD.
- Stable build 153.0.8010.47/48 rolling out; admins should confirm fleet-wide patch deployment.
- CVEs
- CVE-2026-91726CVE-2026-91721CVE-2026-91749CVE-2026-91724CVE-2026-91728CVE-2026-91734CVE-2026-91727CVE-2026-91743CVE-2026-91744CVE-2026-91712CVE-2026-91748CVE-2026-91720CVE-2026-91731CVE-2026-91747CVE-2026-91733CVE-2026-91741CVE-2026-91709CVE-2026-91717CVE-2026-91735CVE-2026-91708CVE-2026-91736CVE-2026-91740CVE-2026-91710CVE-2026-91718CVE-2026-91716CVE-2026-91746CVE-2026-91729CVE-2026-91737CVE-2026-91711CVE-2026-91715
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-91710 | Use-After-Free in Google Chrome WebAppInstalls Allows Sandbox Escape RCE | 9.6 group max | — |
From the original article
4 min read at gbhackers.com
Google has released Chrome version 153 to the Stable channel for desktop, addressing 42 security vulnerabilities, including three critical-severity flaws affecting WebGL, Chrome internals, and Workers. This update is being rolled out as version 153. 0.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.