Google patches 9 Chrome flaws, one already exploited in attacks
Google released an emergency update for Chrome on November 9, 2026, fixing nine security flaws in the desktop and mobile versions of the browser. The company acted after confirming that attackers were already exploiting one of the bugs in targeted attacks. The fixes also cover graphics initialization errors and failures in internal authorization checks.
Google is keeping the technical details of the flaws and the exploit links out of public view for now. Its advisory says access “may be kept restricted until a majority of users are updated with a fix.” The company describes this as a direct protective step, and the practice is standard in the technology industry because it keeps criminals from studying the patches and building new attacks against computers that have not been updated.
Patched versions for each operating system
The package covers CVE-2026-125345, an uninitialized resource in WebGL, and CVE-2026-125347, an authorization flaw in the file system, both rated high severity. Seven of the nine fixes are high severity and two are medium. The most serious bug is CVE-2026-125350, a use-after-free flaw in the XML component, which occurs when software keeps using memory after it has been released.
- Windows: 157.0.8103.50 and 157.0.8103.51
- macOS: 157.0.8103.50 and 157.0.8103.51
- Linux: 157.0.8103.50
- Android: 157.0.8103.50
The desktop version began reaching users around the world in stages, and Google said the rollout could take days or weeks. Google also said the Android release, published on the same day, carries the same security fixes as the desktop version. Phone users will receive it through the Google Play store.
Check out: Google Messages redesigns swipe gestures for timestamps and replies
How to check and update Chrome on a computer
Chrome checks for updates in the background on a regular basis, but the protection only takes effect after the program restarts. Security analysts recommend forcing a manual check right away to avoid prolonged exposure. The check is done from the browser itself, without waiting for the automatic cycle.
To update Chrome on a desktop, open the main menu by clicking the three vertical dots in the upper-right corner of the window. Then hover over Help and click About Google Chrome. The page runs an automatic check with Google‘s servers and starts downloading the files the update needs.
Follow: Google confirms Gemini models breached three firms in May 2026
When the installation finishes, click the Relaunch button shown on the screen. Open tabs and pages are restored automatically when the program reopens. Users of other Chromium-based browsers, such as Microsoft Edge, Brave, Opera and Vivaldi, should install their makers’ updates once they are released.
