Should you update to Chrome 153.0.8010.36?
No: install Chrome 157.0.8103.38 instead. Chrome 153.0.8010.36 is a security update Google released on 8 Sep 2026 for Mac, Windows and Linux. It fixes 230 security flaws, 5 rated critical and 41 high by Google.[1] One of them is already being used in attacks.
It has since been replaced by Chrome 153.0.8010.47, released 15 Sep 2026, which includes all of its fixes. If you’re on an older version, install that instead.
Should you update?
No: install Chrome 157.0.8103.38 instead. Chrome 157.0.8103.38 came out on 3 Nov 2026 and includes every fix in Chrome 153.0.8010.36, so there’s no reason to stop at this one. Software Update offers the newest version your device can run.
Is Chrome 153.0.8010.36 still safe?
Not any more. The 12 updates since, up to Chrome 157.0.8103.38, fix 1,142 security flaws that Chrome 153.0.8010.36 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from Chrome’s own About page (chrome://settings/help), never from a link in an email, text or pop-up.
What it fixes
Google lists 230 security flaws, 5 rated critical and 41 high by Google.[1] The 46 critical and high ones are:
| Flaw | Severity | What Google calls it |
|---|---|---|
CVE-2026-87464 | Critical | Use after free in WebGL |
CVE-2026-87488 | Critical | Use after free in WebGL |
CVE-2026-87438 | Critical | Out of bounds write in WebGL |
CVE-2026-87527 | Critical | Buffer overflow in WebGL |
CVE-2026-87628 | Critical | Use after free in Cast |
CVE-2026-87512 | High | Use after free in ANGLE |
CVE-2026-87585 | High | Double free in PDFium |
CVE-2026-87444 | High | Memory corruption in Codecs |
CVE-2026-87447 | High | Incorrect authorization in Network |
CVE-2026-87440 | High | Out of bounds read in Media |
CVE-2026-87633 | High | Use after free in Views |
CVE-2026-87525 | High | Out of bounds read in Chromoting |
CVE-2026-87578 | High | Use after free in Receiver |
CVE-2026-87517 | High | Race condition in Mobile |
CVE-2026-87524 | High | Use after free in Core |
CVE-2026-87569 | High | Missing authorization in Views |
CVE-2026-87554 | High | Race condition in Chromoting |
CVE-2026-87467 | High | Race condition in Updater |
CVE-2026-87492 | High | Incorrect authorization in DevTools |
CVE-2026-87520 | High | Use after free in Dawn |
CVE-2026-87514 | High | Use after free in Views |
CVE-2026-87650 | High | Out of bounds read in WebGL |
CVE-2026-87596 | High | Out of bounds read in ANGLE |
CVE-2026-87654 | High | Buffer overflow in ANGLE |
CVE-2026-87604 | High | Out of bounds read in ANGLE |
CVE-2026-87621 | High | Out of bounds write in ANGLE |
CVE-2026-87647 | High | Uninitialized resource in GPU |
CVE-2026-87646 | High | Use after free in Web Authentication |
CVE-2026-87500 | High | Improper validation of array index in ANGLE |
CVE-2026-87572 | High | Injection in DevTools |
| and 16 more | ||
Used in attacks
This fix closes a flaw that attackers were already using before the update came out, either on CISA’s list of flaws being used in attacks or in Google’s own words.[2]
How to update, and how long it takes
A minute or two. Chrome downloads it in the background, and relaunching reopens your tabs.
- Open Chrome’s About page.Type chrome://settings/help in the address bar, or open the ⋮ menu → Help → About Google Chrome. Chrome checks and downloads the update.
- Click Relaunch.Chrome reopens your tabs. Until you relaunch, the old, unfixed version keeps running.
- Do the same in every Chromium browser.Edge, Brave, Opera and Vivaldi are built on the same code and get the same fixes a few days later.
To check it worked: chrome://settings/help shows the version, and says “Chrome is up to date” when it is. It should say 153.0.8010.47 or later.
152.0.7977.82 vs 153.0.8010.36
Chrome 152.0.7977.82, released 3 Sep 2026, fixed 12 security flaws, one already used in attacks. Chrome 153.0.8010.36 fixes 230 security flaws and includes the fixes before it, so going straight to 153.0.8010.36 gets you both.
- Before: Chrome 152.0.7977.82, 3 Sep 2026, 12 security flaws
- After: Chrome 153.0.8010.47, 15 Sep 2026, 42 security flaws
- Chrome updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Google. “Stable Channel Update for Desktop”, 8 Sep 2026.
- ^ Cybersecurity and Infrastructure Security Agency. “Known Exploited Vulnerabilities Catalog”.