Chrome 156.0.8078.79/.80 (29 Oct): 21 security fixes including a Critical memory-corruption bug in MediaStream (CVE-2026-76024); no exploitation noted
Google's Chrome Releases blog says the Stable and Extended Stable channels were updated on 29 October 2026 to 156.0.8078.79/.80 for Windows and Mac and 156.0.8078.79 for Linux, rolling out over the coming days and weeks, with 21 security fixes: one Critical, 19 High and one Medium.
The Critical bug is CVE-2026-76024, memory corruption in MediaStream, reported by Xinyang Ge on 21 October. High-rated fixes include use-after-free and memory-corruption bugs in FileSystem, Autofill, CacheStorage, Network, Input, Frames, Skia, V8, GarbageCollection, Dawn, Quota, DOM, Editing and Blink; Google is credited with 12 of the 21 bugs. Google does not say any of the flaws is exploited and does not publish CVSS scores; bug details stay restricted until most users have updated.
Chrome 156.0.8078.79 for Android, released the same day, contains the same security fixes as the desktop release unless otherwise noted.
This follows the 156.0.8078.73/.74 update of 27 October, which is a separate card. (source: Chrome Releases)
- Product
- Google Chrome desktop (Windows, Mac, Linux; Stable and Extended Stable) and Chrome for Android
- Versions
- Fixed: Chrome 156.0.8078.79/.80 (Windows, Mac), 156.0.8078.79 (Linux, Android). Earlier builds are affected.
- CVSS
- not published by Google; one flaw rated Critical by Chrome
- Exploited in Australia?
- unknown
- Patch to
- Update Chrome to 156.0.8078.79 or later and relaunch the browser (Android: 156.0.8078.79 from Google Play). Managed fleets: confirm the update has applied and users have restarted, and watch for matching Edge, Brave, Opera and Electron releases built on Chromium 156.