Google Chrome 157 fixes 213 flaws, including seven critical bugs

Google has promoted Chrome 157 to the stable channel, delivering version 157.0.8103.38 for Linux and 157.0.8103.38/.39 for Windows and macOS, with Google reporting 213 security fixes and seven rated as critical. The update patches a batch of memory and use-after-free vulnerabilities in graphics and rendering components, alongside 77 high-severity flaws. The Chrome security team notes that there is no confirmed exploitation in the wild at this time.

The article lists seven CVEs as critical, all not exploited, with the highest severity at CVSSv3 9.6: CVE-2026-121156, CVE-2026-121229, CVE-2026-121246, CVE-2026-121035, CVE-2026-121247, CVE-2026-121126, CVE-2026-121203; a further CVE-2026-121126 appears in the high/critical group and CVE-2026-121035 is highlighted among the Prerender-related issues.

The affected desktop builds are prior to 157.0.8103.38 on Linux and prior to 157.0.8103.38/.39 on Windows and Mac; Extended Stable users move to 156.0.8078.88 on Windows and Mac. Release notes point to Google’s Chrome 157 stable channel update for full details.

The report attributes the discovery and tackling of several flaws to researchers aided by AI tools: Anthropic researchers, assisted by Claude, reported 12 bugs; OpenAI Codex Security found five more, with the Prerender flaw CVE-2026-121035 specifically noted as being identified by Xinyang Ge of Anthropic working with Claude.

The article lists the seven critical CVEs and explains that many high-severity issues stem from use-after-free and memory-corruption bugs across V8, PDFium, Skia, Media and FileSystem components. The practical response is to apply the Chrome security update via Settings > About Chrome and to restart the browser; the piece references Google’s release notes for full details.