Google Chrome 157 Fixes 9 Security Vulnerabilities, Including One Exploited in the Wild

Google has released a major security update for Chrome, which you shouldn’t ignore. The latest Chrome 157 update fixes nine security vulnerabilities, including a high-severity flaw that attackers are reportedly already exploiting in the wild.

Chrome 157 patches nine security vulnerabilities

Google released Chrome 157.0.8103.50/.51 for Windows and Mac, alongside version 157.0.8103.50 for Linux (via Bleeping Computer). The update was rolled out yesterday and will gradually reach users in the coming days and weeks.

Among the nine security fixes, CVE-2026-125350 deserves a special mention. Google confirmed that an exploit for this high-severity vulnerability exists in the wild. The flaw involves a use-after-free issue in Chrome’s XML component.

The update also addresses several other high-severity vulnerabilities. These include an uninitialized resource issue in WebGL, incorrect authorization in FileSystem, and a buffer overflow in Compositing. Google has also fixed an out-of-bounds write vulnerability in the GPU component. Other patches address type confusion in V8 and another use-after-free issue in XML.

Several GPU and browser components receive security fixes

Interestingly, GPU-related vulnerabilities account for multiple entries in this release. Google fixed two medium-severity issues involving uninitialized resources in the GPU component. Both could expose users to security risks if left unpatched. The remaining fixes cover XML, WebGL, FileSystem, Compositing, and V8. Google credited security researchers for reporting several vulnerabilities during development.

How to get the latest Chrome update

Chrome users can install the update manually by opening the browser’s three-dot menu. Navigate to Help, select About Google Chrome, and allow the browser to check for updates. Restart Chrome when prompted to complete installation.