Google Chrome 153.0.8010.37
Google Chrome 153.0.8010.37, released September 7, 2026, fixes 185 CVEs in Google Chrome. One of them is being exploited (CVE-2026-87491); 1 on CISA KEV. Patch Radar priority: Patch now. The latest Google Chrome is 157.0.8103.51, which also fixes every one of these CVEs.
Superseded. The latest Google Chrome is 157.0.8103.51, which also fixes every CVE on this page. Install that instead.
Priority of the 185 CVEs
Applies to
| Product | Version |
|---|---|
| Google Chrome | 153.0.8010.37 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-87491 | Chromium CVE-2026-87491: Out of bounds write in V8 | 8.8 | 0.0351 | KEVExploited |
| Urgent | CVE-2026-87464 | Chromium CVE-2026-87464: Use after free in WebGL | 9.6 | 0.0058 | None reported |
| Urgent | CVE-2026-87646 | Chromium CVE-2026-87646: Use after free in Web Authentication | 9.6 | 0.0053 | None reported |
| Urgent | CVE-2026-87527 | Chromium CVE-2026-87527: Buffer overflow in WebGL | 9.6 | 0.0051 | None reported |
| Urgent | CVE-2026-87529 | Chromium CVE-2026-87529: Numeric truncation error in Media | 9.6 | 0.0050 | None reported |
| Urgent | CVE-2026-87547 | Chromium CVE-2026-87547: Incorrect reference resolution in FileSystem | 9.6 | 0.0050 | None reported |
| Urgent | CVE-2026-87613 | Chromium CVE-2026-87613: Incorrect reference resolution in Extensions | 9.0 | 0.0047 | None reported |
| Urgent | CVE-2026-87448 | Chromium CVE-2026-87448: Use after free in DevTools | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87455 | Chromium CVE-2026-87455: Use after free in Aura | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87470 | Chromium CVE-2026-87470: Improper quantity validation in Tint | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87474 | Chromium CVE-2026-87474: Use after free in Payments | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87558 | Chromium CVE-2026-87558: Use after free in Payments | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87581 | Chromium CVE-2026-87581: Use after free in Payments | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87607 | Google Chrome: Use after free | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87634 | Chromium CVE-2026-87634: Use after free in WebPackaging | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87637 | Chromium CVE-2026-87637: Use after free in Extensions | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87638 | Chromium CVE-2026-87638: Out of bounds write in Media | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87650 | Chromium CVE-2026-87650: Out of bounds read in WebGL | 9.6 | 0.0046 | None reported |
| Urgent | CVE-2026-87492 | Chromium CVE-2026-87492: Incorrect authorization in DevTools | 9.6 | 0.0044 | None reported |
| Urgent | CVE-2026-87504 | Chromium CVE-2026-87504: Use after free in Core | 9.6 | 0.0043 | None reported |
| Urgent | CVE-2026-87526 | Chromium CVE-2026-87526: Use after free in Passwords | 9.6 | 0.0043 | None reported |
| Urgent | CVE-2026-87595 | Chromium CVE-2026-87595: Server-side request forgery in Mobile | 9.8 | 0.0042 | None reported |
| Urgent | CVE-2026-87500 | Chromium CVE-2026-87500: Improper validation of array index in ANGLE | 9.6 | 0.0036 | None reported |
| Urgent | CVE-2026-87544 | Chromium CVE-2026-87544: Incorrect authorization in Extensions | 9.8 | 0.0034 | None reported |
| High | CVE-2026-87430 | Chromium CVE-2026-87430: Buffer overflow in WebRTC | 8.8 | 0.0057 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.