Google Chrome 156 fixes 21 flaws, including critical bug

Google has rolled out Chrome 156.0.8078.79/0.8078.80 for Windows and Mac, with Linux receiving 156.0.8078.79, to fix 21 vulnerabilities across the Stable and Extended Stable channels. The update addresses one critical flaw in MediaStream, plus 19 high‑severity and one medium‑severity bugs, with Google noting that exploitation has not been reported to date. Affected users are advised to install the latest Chrome release and restart the browser.

CVE-2026-76024 is identified as the critical memory corruption flaw in MediaStream, disclosed by Xinyang Ge, which could allow a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. The remaining high‑severity issues span components including FileSystem, Autofill, Network, V8, Skia, Dawn, DOM and Blink; for example, CVE‑2026‑119262 in V8 could allow arbitrary code execution inside the sandbox.

Google indicates that twelve of the 21 issues were discovered by Google itself, with Ge reporting four flaws in total, including the critical MediaStream bug. All Chrome versions prior to 156.0.8078.79 are affected on Windows, Mac and Linux.

Patch and mitigation steps are straightforward: open Chrome’s menu, select Help and About Google Chrome to apply the update. Google notes that bug details may remain restricted until a majority of users are updated. The article states that, while no exploitation or PoC has been confirmed, users should apply the Chrome 156 security update promptly.