Google has released a Chrome update that fixes 83 security flaws, including five rated Critical, and users are advised to update and restart the browser now. The update takes Windows and Mac to version 157.0.8103.78 or 157.0.8103.79, and Linux to 157.0.8103.78, and it was published on the Chrome Releases blog on 11 November 2026.

It is an unusually large batch for a single Stable channel update, and it arrives only days after Google shipped an emergency fix for a Chrome zero-day that attackers were already exploiting. This latest release is a separate update: Google has not reported any exploitation of the flaws it fixes.

Five Critical use-after-free flaws

All five Critical flaws are use-after-free errors, a class of memory bug in which a program keeps using a piece of memory after it has been freed. Attackers can exploit that confusion to run code, crash the browser or escape its sandbox protections.

The five are CVE-2026-126885, a use-after-free in ServiceWorker; CVE-2026-126895, a use-after-free in CSS; CVE-2026-126879, a use-after-free in Layout; CVE-2026-126846, a use-after-free in Skia, the graphics engine; and CVE-2026-126911, a use-after-free in Accessibility. The remaining 78 fixes are rated High severity, and they cover components including V8, the JavaScript engine, the GPU process, media handling and the browser’s compositing and rendering code.

Google is keeping the technical details of the bugs restricted until most users have updated, which is its usual practice. That means there is little public detail about how any single flaw could be exploited, but the severity ratings and the breadth of the affected components are reason enough to install the update promptly.

A different update from the Chrome zero-day fix

It is worth distinguishing this release from the one Google shipped on 9 November. That earlier update, Chrome 157.0.8103.50, fixed nine flaws including CVE-2026-125350, a use-after-free in Chrome’s XML component that Google said was being exploited in the wild. CISA added that flaw to its Known Exploited Vulnerabilities catalogue on 10 November.

The new 157.0.8103.78 update is a much larger clean-up of flaws found through Google’s own testing and reports from outside researchers. Security researchers earned bounties for several of the fixes, including a $4,000 reward paid to Jihyeon Jeong for a V8 use-after-free, CVE-2026-126864. No exploitation has been reported for any flaw in this batch.

How to update Chrome

Google says the update will roll out over the coming days and weeks, so not every computer will receive it at the same time. Users do not need to wait: on desktop, open the three-dot menu, go to Help and then About Google Chrome, and the browser will check for the update and install it. The browser must be relaunched for the fix to take effect.

To confirm the update, check that the version shown on the About page is 157.0.8103.78 or later on Linux, and 157.0.8103.78 or .79 on Windows and Mac. Anyone still on an earlier build, including the 157.0.8103.50 build from the zero-day fix, should update again.

Chrome is the world’s most widely used browser, so a batch of 83 fixes is a reminder of how much of the web’s security depends on keeping it current. The update is free, takes a minute to install, and closes flaws that would otherwise remain open on millions of computers. Sources: SecurityOnline and Google Chrome Releases.