AppYour homeOperatorJournalAlerts
Request an introduction
Advisory

Chrome before 156.0.8078.47

Chrome 156.0.8078.47 came out on 20 Oct 2026 with 353 security fixes, 6 rated critical and 61 high by Google. Any older Chrome is missing at least those, and Chrome older than 153.0.8010.36 is missing fixes for flaws being used in attacks.

Chrome before 156.0.8078.47High
Affected
Google Chrome before 156.0.8078.47 (156.0.8078.48 on Mac)
Fix
Chrome 156.0.8078.47, released 20 Oct 2026
In this release
353 security fixes, 6 rated critical and 61 high by Google
Further back
Chrome before 153.0.8010.36 is also missing fixes for flaws Google says are being used in attacks
Used in attacks
  • CVE-2026-87491, a memory flaw in Chrome's JavaScript engine that lets a web page run code
  • CVE-2026-85046, a flaw that makes Chrome's JavaScript engine mix up types of data, letting a web page run code
What's missing.Counted from Google’s release notes, the same way the HARD app counts it, checked 23 Oct 2026.

Chrome downloads updates by itself, but only applies them when it relaunches. A Chrome that’s been open for weeks can be several releases behind while showing nothing wrong.

Being used in attacks

  1. Used in attacks
    CVE-2026-87491

    A memory flaw in Chrome's JavaScript engine that lets a web page run code.

    What it is, and the sources
  2. Used in attacks
    CVE-2026-85046

    A flaw that makes Chrome's JavaScript engine mix up types of data, letting a web page run code.

    What it is, and the sources

What to do

  1. Relaunch Chrome.If it has already downloaded the update, the button at the top right says Relaunch or Update. Your tabs come back.
  2. Or check by hand.Chrome → About Google Chrome in the menu bar. It should say Chrome is up to date, on 156.0.8078.48 or later.

Release by release

ReleaseFixesCriticalHighBehind
Chrome 156.0.8078.47/48 353 661 353
Chrome 155.0.8059.84/85 10 16 363
Chrome 155.0.8059.79/80 37 729 400
Chrome 155.0.8059.39/40 247 453 647
Chrome 154.0.8037.97/98 11 19 658
Chrome 154.0.8037.92/93 32 125 690
Chrome 154.0.8037.57/58 108 1125 798
Chrome 153.0.8010.52/53 16 27 814
Chrome 153.0.8010.47/48 42 328 856
Chrome 153.0.8010.36/37 · CVE-2026-87491 230 541 1,086
Chrome 152.0.7977.82/83 · CVE-2026-85046 12 010 1,098
Chrome 152.0.7977.75/76 26 29 1,124
Chrome 152.0.7977.64/65 327 1061 1,451
Newest first.Every Chrome release since Chrome 152, with Google’s own counts. “Behind” is what you’re missing if your Chrome is older than that release.

Sources

  1. Stable Channel Update for Desktop: Chrome 156.0.8078.47/48353 security fixes, 6 rated critical and 61 high by Google.chromereleases.googleblog.com ·
  2. Stable Channel Update for Desktop: Chrome 153.0.8010.36/37230 security fixes, 5 rated critical and 41 high by Google.chromereleases.googleblog.com ·
  3. Stable Channel Update for Desktop: Chrome 152.0.7977.82/8312 security fixes, 0 rated critical and 10 high by Google.chromereleases.googleblog.com ·
  4. Known Exploited Vulnerabilities catalog: CVE-2026-87491CVE-2026-87491, added 9 Sep 2026.cisa.gov ·
  5. Known Exploited Vulnerabilities catalog: CVE-2026-85046CVE-2026-85046, added 4 Sep 2026.cisa.gov ·
Every advisoryLook up any app, company or CVEThe HARD Mac app links its warnings here.