Google's Stable Channel Update for Desktop (1 September 2026) promotes Chrome to 152.0.7977.75/.76 on Windows and Mac and 152.0.7977.75 on Linux, with 26 security fixes.

Google rates two Critical, both use-after-free flaws reported by Google: CVE-2026-84353 in Shared Tab Groups and CVE-2026-84352 in WebGL. It rates nine High, including incorrect authorization in FileSystem (CVE-2026-84354), an information leak in Skia (CVE-2026-84359), improper input validation in Omnibox (CVE-2026-84357), use-after-free flaws in Proxy, Browser and Dawn, a buffer overflow in GPU and an uninitialized resource in V8, plus ten Medium and five Low.

Google's post does not say any of the flaws is being exploited in the wild and gives no CVSS scores. (source: Chrome Releases)

Correction (29 Oct 2026): this card previously covered both Chrome 152 and Firefox 155; Firefox 155 now has its own card, sourced from Mozilla's advisory, and the news report the Firefox figures came from is no longer linked here.

The card date is now 1 September 2026, the date shown on Google's post (it was 2 September). (source: Chrome Releases)