Chrome 157 fixes 213 security flaws, including seven critical

Google has released Chrome 157 to the stable channel for Windows, Mac and Linux, with the desktop update bringing versions 157.0.8103.38/ .39 for Windows and Mac and 157.0.8103.38 for Linux, Malwarebytes reports. The patch defuses 213 security issues, seven of which Google grade as Critical, including a memory corruption flaw in ANGLE on Chrome for Android that could allow remote code execution outside the sandbox via a crafted HTML page, as cited by Google’s advisory and detailed by Malwarebytes’ Pieter Arntz.

Also listed as Critical are CVE-2026-121035 (Use-after-free in Prerender) and CVE-2026-121156 (Buffer overflow in Dawn), with the writer outlining how these components underpin fast page rendering and WebGPU support, respectively. The article notes that ANGLE is Chrome’s graphics translation layer, and that a buffer overflow in Dawn could let an attacker run code.

In addition to the Windows/Mac/Linux desktop roll-out, Chrome for Android has been updated to 157.0.8103.38 and will appear in Google Play over the coming days, according to Malwarebytes. The piece explains how to update via About Google Chrome or by letting automatic updates proceed, while warning that delays can occur if the browser is left open or an extension blocks the update. The report attributes these details to Google’s Chrome release notes and to Malwarebytes’ analysis of the CVEs.