Chrome 157 patches 213 security bugs, seven of them critical
The stable channel update fixes flaws in Dawn, Prerender and ANGLE among others. Google has not flagged any of them as exploited, but the sheer count is worth a prompt update.
Chrome 157 reached the stable channel on 3 November, bringing 213 security fixes: seven critical, 77 high, and the rest medium or low severity. Versions are 157.0.8103.38 on Linux and 157.0.8103.38 or .39 on Windows and Mac.
The critical bugs sit in places that matter for sandbox integrity: a buffer overflow in Dawn, Chrome’s WebGPU implementation, memory corruption in ANGLE, and a flaw in Prerender. Google has not said that any of them are being exploited in the wild.
Why it matters: 213 fixes in one release is a lot even by Chrome’s standards, and critical bugs in Dawn and ANGLE are the kind that can lead to sandbox escapes once someone works out a chain. Chrome auto-updates for most people, but if you manage machines on a delayed or pinned Chrome build, this is the release to stop deferring.
The caveat: none of this is confirmed under active attack yet. That is normal for a Chrome release, not a sign the count is inflated, but it also means there is no deadline pressure beyond “patch on your normal cycle.”