Google's Stable Channel Update for Desktop (15 September 2026) promotes Chrome to 153.0.8010.47/.48 on Windows and Mac and 153.0.8010.47 on Linux, with 42 security fixes. Google rates three Critical: an out-of-bounds read in WebGL (CVE-2026-91726) and use-after-free flaws in Internals (CVE-2026-91721) and Workers (CVE-2026-91749). It rates 28 High, including use-after-free, race-condition and type-confusion flaws in components such as V8, Skia, ServiceWorker, Extensions and Core, plus ten Medium and one Low.

Google's post does not say any of the flaws is being exploited in the wild. (source: Chrome Releases)

Correction (29 Oct 2026): this card previously covered both Chrome 153 and Firefox 156; Firefox 156 now has its own card, and a combined defect count from a news report that is no longer linked here was removed. (source: Chrome Releases)