Google has begun rolling out a new update for the Chrome desktop browser that addresses 230 security vulnerabilities, including one flaw that security agencies say is currently being exploited in real-world attacks.
The latest Stable Channel release brings Chrome to version 153.0.8010.36/.37 on Windows and macOS, and 153.0.8010.36 on Linux.
This latest update highlights the importance of why you should check and upgrade your Chrome now!
How to Update Chrome
Most users receive Chrome updates automatically, but there can be delays if the browser is rarely restarted or if an issue prevents the update from installing correctly.
To check for updates manually:
- Open Chrome.
- Click the three-dot menu in the top-right corner.
- Select Settings.
- Navigate to About Chrome.
Chrome will automatically search for and download any available updates. Once the installation is complete, restart the browser to apply the changes and ensure you’re protected against the latest security issues.
Security Flaw Under Active Exploitation
One of the vulnerabilities fixed in this release is CVE-2026-87491, an out-of-bounds write issue affecting Chrome’s V8 JavaScript engine.
According to the vulnerability description, an attacker could exploit the flaw by luring a user to a specially crafted website. If successful, the attacker could execute arbitrary code within Chrome’s security sandbox.
Because the vulnerability exists in the component responsible for processing JavaScript, a malicious webpage could trigger improper memory handling and gain the ability to run code selected by the attacker. While this code would initially be restricted by Chrome’s sandbox protections, the flaw still presents a significant risk because simply visiting a compromised website could provide attackers with a foothold on the system.
Although email messages are generally unlikely to directly exploit the issue, attackers could still attempt to distribute links to malicious websites through phishing campaigns. Modern email services typically disable or filter active content such as JavaScript, reducing the likelihood of direct exploitation from within an email message itself.
Additional Critical Fixes
Alongside the actively exploited vulnerability, Google has also patched five Critical-rated security issues. Four of those vulnerabilities affect WebGL, the browser technology that enables high-performance 2D and 3D graphics rendering within web pages.
WebGL is widely used by interactive websites, online applications, and browser-based games, making security updates in this area particularly important.
Keeping Chrome updated remains one of the most effective ways to reduce exposure to security threats and ensure vulnerabilities are addressed before they can be exploited.
