Skip to content
~/pwn.watch_

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Become a sponsor

One slot: pwn.watch, gifs.so, flavors.design, kitze.io, every kitze repo, and an X shout-out.

YearlyBest value · save 44%$999/year$83.25/mo, billed yearly. Save $789 vs monthly (5+ months free).Monthly$149/monthBilled monthly. Cancel anytime.

Secure checkout on Polar. Right after paying you set up your ad on kitze.io.

← Live incidents
LivePatchedPatch now

Chrome 157 fixes 213 security bugs, 7 of them critical (none known exploited)

Google Chrome (desktop)

Brought to you byTinkerer Club

The private club for people who own their servers, run their own AI, and pay $0/month for software.

Google promoted Chrome 157 to the stable channel on Nov 3 2026 (157.0.8103.38 on Linux, 157.0.8103.38/.39 on Windows and Mac) with 213 security fixes. Seven are rated critical: buffer overflows in Dawn (CVE-2026-121156, CVE-2026-121247), memory corruption in ANGLE (CVE-2026-121229), and use-after-free bugs in WebGL (CVE-2026-121246), Prerender (CVE-2026-121035), Geometry (CVE-2026-121203) and Core (CVE-2026-121126). Many of the high-severity bugs were credited to AI-assisted research from Anthropic and OpenAI Codex Security. Google has not said any are exploited. The rollout is staged over days or weeks, so update and relaunch rather than waiting.

Why this severity: 7 critical and many high-severity memory-safety fixes; no known in-the-wild exploitation

Started
Nov 3, 2026
CVEs
CVE-2026-121156CVE-2026-121229CVE-2026-121246CVE-2026-121035CVE-2026-121247CVE-2026-121203CVE-2026-121126

Follow this incident

Discuss on X ↗

Affected

  • Chrome before 157.0.8103.38

Fixed in

  • 157.0.8103.38/.39 (Windows, Mac)
  • 157.0.8103.38 (Linux)

Timeline2

  1. Hong Kong's GovCERT issues an alert telling users to update Chrome to 157.0.8103.38 or later, warning the flaws could allow remote code execution.

  2. Chrome 157 promoted to stable with 213 security fixes, seven of them critical (Dawn, ANGLE, WebGL, Prerender, Geometry, Core); none reported exploited.

Advisories2

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Sponsored

Buy sponsor slot · $149/mo