Google Releases Chrome 157 Update Patching Nine Vulnerabilities Including Exploited XML Flaw

On November 9, Google rolled out the Chrome 157 stable update, patching nine security vulnerabilities across browser components including WebGL, GPU, V8, XML, and FileSystem. Seven flaws are rated high severity and two are rated medium severity. Among them, CVE-2026-125350 has been actively exploited in the wild. This vulnerability is a high-severity Use-After-Free (UAF) flaw residing in the XML component; Google has not disclosed specific details regarding how it was exploited. Other patched vulnerabilities include uninitialized resources (three flaws), Use-After-Free (two flaws), incorrect authorization, memory buffer overflow, out-of-bounds write, and type confusion. Google urges users to apply the update promptly. Windows and macOS users should update to version 157.0.8103.50 or 157.0.8103.51, while Linux and Android users should update to 157.0.8103.50.

Key takeaways

• Google released the Chrome 157 stable update on November 9, patching nine security flaws including seven high-severity and two medium-severity issues.
• The high-severity flaw CVE-2026-125350, a Use-After-Free issue in the XML component, has been exploited in the wild; Google did not disclose exploitation details.
• Patched components span WebGL, GPU, V8, XML, and FileSystem, addressing uninitialized resources, buffer overflow, out-of-bounds write, and type confusion.
• Google urges immediate updates: Windows and macOS users to 157.0.8103.50 or 157.0.8103.51, and Linux and Android users to 157.0.8103.50.