Chrome 157 Patches 213 Flaws, Including 7 Critical Memory Corruption Bugs
Google has released Chrome 157 (157.0.8103.38/.39) to the stable channel, fixing 213 security issues, an unusually large batch for a single release. Seven flaws are rated critical, including buffer overflows in the Dawn WebGPU engine and memory corruption in ANGLE, along with multiple use-after-free bugs in WebGL, Prerender, Geometry and Core. Google has not confirmed exploitation in the wild for any of these issues, but critical browser bugs could allow a malicious web page to escape sandboxing and execute arbitrary code. AI-assisted research played a significant role this cycle, with Anthropic (aided by Claude) and OpenAI Codex Security credited for 17 of the reported bugs combined.
Entenda a falha
A vulnerabilidade
Chrome 157 fixes 213 security issues, seven of them critical memory bugs. The most severe is CVE-2026-121156 (CVSS 9.6), a buffer overflow in Dawn, Chrome's WebGPU engine. CVE-2026-121247 is a second Dawn overflow. CVE-2026-121229 is memory corruption in ANGLE. CVE-2026-121246 (WebGL), CVE-2026-121035 (Prerender), CVE-2026-121203 (Geometry) and CVE-2026-121126 (Core) are use-after-free bugs. The articles say a malicious web page could escape the sandbox and run code. They do not detail the exact conditions. Affected: desktop builds before 157.0.8103.38 on Linux and before 157.0.8103.38/.39 on Windows and Mac. Fixed in those versions, and in 156.0.8078.88 for Extended Stable on Windows and Mac. Google has not confirmed exploitation in the wild.
Como funciona
The browser processes content from a web page in its graphics and rendering components, such as WebGPU (Dawn), ANGLE, WebGL, Prerender, Geometry and Core. In the use-after-free cases, the code releases a block of memory but keeps using it afterwards. In the buffer overflow cases, the code writes past the end of a memory block. In both, memory the program trusts ends up holding data an attacker could influence. The articles say this could let an attacker hijack the program's execution. They do not give per-bug details, because Google keeps them private until most users are updated.
Por que é vulnerável
The root causes are memory-safety errors in native browser code. Some components free memory while references to it are still in use (use-after-free). Dawn writes beyond the bounds of a buffer (buffer overflow). ANGLE has unspecified memory corruption. The articles do not explain why these bugs went unnoticed or what exactly each patch changes, beyond saying that the fixes ship in Chrome 157.
Como foi descoberta
Google's internal teams reported 38 of the 84 critical and high-severity bugs. AI-assisted research played a large role: Anthropic researchers, assisted by Claude, reported 12 of the bugs, and OpenAI Codex Security found five more. Xinyang Ge of Anthropic, working with Claude, found the Prerender flaw CVE-2026-121035. The top bug bounty rewards were $10,000 each, for the Dawn overflow CVE-2026-121156 and a BackgroundFetch authorization bug. Google released the fixes in the stable channel update and has not said any of the flaws are exploited in the wild.
Explicação gerada por IA a partir da matéria e dos artigos, em 04/11/2026 09:11.
Detalhes técnicos
- CVE-2026-121156 (CVSS 9.6) and CVE-2026-121247: buffer overflows in Dawn (WebGPU)
- CVE-2026-121229: memory corruption in ANGLE
- CVE-2026-121246: use-after-free in WebGL
- CVE-2026-121035: use-after-free in Prerender (found by Xinyang Ge of Anthropic with Claude)
- CVE-2026-121203: use-after-free in Geometry
- CVE-2026-121126: use-after-free in Core
- Use-after-free bugs account for 35 of the listed issues; V8 has 10 high-severity type confusion flaws; other fixes affect PDFium, Skia, Media and FileSystem.
- Google's internal teams found 38 of the 84 critical/high severity bugs; top bug bounty rewards were $10,000 for the Dawn overflow and a BackgroundFetch authorization issue.
Remediação
Update to Chrome 157.0.8103.38 (Linux) or 157.0.8103.38/.39 (Windows/Mac) via Settings > About Chrome, then restart the browser. Extended Stable channel users should update to 156.0.8078.88 on Windows and Mac. The rollout occurs gradually over coming days/weeks.
Linha do tempo
-
Chrome 157 Patches 213 Flaws, Including 7 Critical Memory Corruption Bugs
ler a análise desta fonte ocultar
Google has released Chrome 157 (157.0.8103.38/.39) to the stable channel, fixing 213 security issues, an unusually large batch for a single release. Seven flaws are rated critical, including buffer overflows in the Dawn WebGPU engine and memory corruption in ANGLE, along with multiple use-after-free bugs in WebGL, Prerender, Geometry and Core. Google has not confirmed exploitation in the wild for any of these issues, but critical browser bugs could allow a malicious web page to escape sandboxing and execute arbitrary code. AI-assisted research played a significant role this cycle, with Anthropic (aided by Claude) and OpenAI Codex Security credited for 17 of the reported bugs combined.
Technical Details
- CVE-2026-121156 (CVSS 9.6) and CVE-2026-121247: buffer overflows in Dawn (WebGPU)
- CVE-2026-121229: memory corruption in ANGLE
- CVE-2026-121246: use-after-free in WebGL
- CVE-2026-121035: use-after-free in Prerender (found by Xinyang Ge of Anthropic with Claude)
- CVE-2026-121203: use-after-free in Geometry
- CVE-2026-121126: use-after-free in Core
- Use-after-free bugs account for 35 of the listed issues; V8 has 10 high-severity type confusion flaws; other fixes affect PDFium, Skia, Media and FileSystem.
- Google's internal teams found 38 of the 84 critical/high severity bugs; top bug bounty rewards were $10,000 for the Dawn overflow and a BackgroundFetch authorization issue.
Remediation
Update to Chrome 157.0.8103.38 (Linux) or 157.0.8103.38/.39 (Windows/Mac) via Settings > About Chrome, then restart the browser. Extended Stable channel users should update to 156.0.8078.88 on Windows and Mac. The rollout occurs gradually over coming days/weeks.