Google has released a new security update for its Chrome browser that fixes nine vulnerabilities, including one that hackers are already exploiting. The update takes Chrome to version 157.0.8103.50 or 157.0.8103.51 on Windows and Mac, and 157.0.8103.50 on Linux and Android. Google has asked users to install it as soon as possible.
The update was rolled out on November 9 and is reaching users in phases. Since Chrome is the most widely used browser in India and around the world, the fix matters to almost everyone who goes online on a computer or phone.
Google Chrome Security Update: Key Details
| Released on | November 9, 2026 |
| New version (Windows, Mac) | 157.0.8103.50/.51 |
| New version (Linux, Android) | 157.0.8103.50 |
| Security fixes | 9 (7 high severity, 2 medium severity) |
| Actively exploited flaw | CVE-2026-125350 |
| Affected part of Chrome | XML, WebGL, GPU, V8, FileSystem, Compositing |
The Flaw Hackers Are Already Using
The most serious issue in this update is tracked as CVE-2026-125350. It is a high-severity “use-after-free” bug in the part of Chrome that handles XML, a format used by many websites to structure data.
In simple terms, a use-after-free bug happens when the browser keeps using a piece of memory after it has been cleared. An attacker can take advantage of this through a specially designed web page to crash the browser or run harmful code on the device.
Google has confirmed that an exploit for this flaw “exists in the wild”, which means it is being used in real attacks. The bug was reported to the company by an unnamed researcher on November 6, and the fix arrived three days later. Google has not shared who is behind the attacks or who is being targeted, and it usually holds back such details until most users have updated.
Other Vulnerabilities Fixed in the Update
Apart from the exploited flaw, the update fixes eight more security issues. Six of them are rated high severity.
| Vulnerability | Severity | Issue |
|---|---|---|
| CVE-2026-125350 | High | Use-after-free in XML (exploited) |
| CVE-2026-125346 | High | Use-after-free in XML |
| CVE-2026-125344 | High | Type confusion in V8 JavaScript engine |
| CVE-2026-125348 | High | Out-of-bounds write in GPU |
| CVE-2026-125343 | High | Buffer overflow in Compositing |
| CVE-2026-125347 | High | Improper authorisation in FileSystem |
| CVE-2026-125345 | High | Uninitialised resource in WebGL |
| CVE-2026-125349 | Medium | Uninitialised resource in GPU |
| CVE-2026-125342 | Medium | Uninitialised resource in GPU |
Most of these bugs were found by Google’s own security teams. Security agencies have warned that, if left unpatched, some of these flaws could let attackers run code remotely, bypass security restrictions or crash the browser.
How to Update Google Chrome
Chrome usually updates on its own, but the update is applied only after the browser is restarted. Users who keep Chrome open for days may still be running the old version. Here is how to check and update manually.
On Windows, Mac and Linux:
- Open Chrome and click the three-dot menu in the top-right corner.
- Go to Help and then About Google Chrome.
- Chrome will check for the update and download it automatically.
- Click Relaunch to finish the update.
On Android phones:
- Open the Google Play Store.
- Search for Google Chrome.
- Tap Update if the option is available.
After updating, the version number on the About Google Chrome page should read 157.0.8103.50 or higher.
Trending Article: iPhone 18 and iPhone 18e Leaks
Other Browsers May Need an Update Too
Chrome is built on the open-source Chromium project, which also powers browsers such as Microsoft Edge, Brave, Opera and Vivaldi. These browsers often share the same flaws and usually release their own fixes within a few days. Users of these browsers should also check for updates.
The latest patch comes just days after Google released Chrome 157 with a large batch of security fixes. With attackers already using one of the bugs, updating the browser is the simplest way to stay safe.