Google Releases Chrome 157 Update Fixing Actively Exploited High-Risk Vulnerability

Google released the Chrome 157 stable channel update on November 9, addressing nine security vulnerabilities. Seven were rated as high severity and two as medium severity. These flaws existed in core browser components including WebGL, GPU, V8, XML, and FileSystem.

Notably, the vulnerability identified as CVE-2026-125350 has been confirmed to be used in actual attacks ("in the wild"). This is a Use After Free flaw located in the XML component and was rated as high severity. Although Google did not disclose specific details on how the vulnerability is being exploited, the company strongly urged users to apply the update promptly due to its active exploitation.

The update also addressed other types of vulnerabilities, including three uninitialized resource flaws, two additional Use After Free flaws, and single instances of incorrect authorization, memory buffer overflow, out-of-bounds write, and type confusion.

Users on different operating systems should update to the following versions to patch these weaknesses: Windows and macOS users should update to 157.0.8103.50 or 157.0.8103.51; Linux and Android users should update to 157.0.8103.50.