Short answer: Chrome 157 was released with 213 security fixes, including seven critical fixes. All Chrome users should update. Rewards were given to researchers who found the bugs.

TL;DR

  • Chrome 157 has 213 security fixes.
  • Seven critical issues were fixed.
  • Rewards were given to the researchers.
  • Users should update their browsers.

What happened at Chrome?

Chrome 157 is a new version of the Chrome browser that includes 213 security updates, with seven being critical. These updates fix security issues like buffer overflows and use-after-free defects. Rewards were given to the researchers who found the bugs. Chrome users should update to protect their devices from potential threats.

Key facts

Reported bySecurityWeek
Date reported04 Nov 2026

How it works

Attack flow: Buffer overflow in Dawn identified then Reported to Google then Fix included in Chrome 157
Built from the checked story facts

Chrome 157 fixes 213 security issues, including seven critical ones. A buffer overflow in Dawn, the WebGPU standard, could let attackers inject malicious code, earning the researcher a $10,000 reward.

  1. Buffer overflow in Dawn identified
  2. Reported to Google
  3. Fix included in Chrome 157

Timeline

DateEventSource
2026-11-04Reported by SecurityWeekSecurityWeek
2026-11-09This Skillmate explainer publishedSkillmate

How to fix it

  1. If you have an account with the affected company, change that password and any reused copies of it.
  2. Turn on two-factor authentication (a second login step) wherever the service offers it.
  3. Expect phishing emails or calls that use the exposed details; verify requests through official channels.

How to detect it

Signs to watch for:

  • Login alerts from new devices or locations on the affected account.
  • Password-reset emails you did not ask for.
  • Phishing messages that quote your real account details.

What is confirmed

  • Reported by SecurityWeek
  • Reported by chromereleases.googleblog.com

Why it matters

Fixing these flaws ensures users' data and privacy are protected. Companies must update to avoid potential exploitation, safeguarding their systems and preventing data breaches.

Learn the skills behind this story

Want to understand attacks like this and defend against them? Join Skillmate cybersecurity training or practise hands-on in Skillmate Labs.

FAQ

What is a buffer overflow?

A buffer overflow happens when more data is written to a buffer than it can hold, potentially leading to a crash or security issue.

Why should I update Chrome?

To protect against newly discovered vulnerabilities. Chrome 157 includes fixes for 213 security issues.

How many critical vulnerabilities were fixed?

Seven critical vulnerabilities were fixed in Chrome 157.

What types of vulnerabilities were fixed?

Types of fixed vulnerabilities include incorrect/missing authorization, use-after-free, and information leak.

Sources

How we wrote this: facts come from the sources above. An on-prem AI model drafted the plain-English parts and every sentence was checked against the sources; unsupported sentences were removed. MITRE mapping is our own judgement.