Google Chrome 156.0.8078.80
Google Chrome 156.0.8078.80, released October 29, 2026, fixes 204 CVEs in Google Chrome. 4 of them are being exploited (CVE-2026-2441); 4 on CISA KEV. Patch Radar priority: Patch now. The latest Google Chrome is 157.0.8103.51, which also fixes every one of these CVEs.
Superseded. The latest Google Chrome is 157.0.8103.51, which also fixes every CVE on this page. Install that instead.
Priority of the 204 CVEs
Applies to
| Product | Version |
|---|---|
| Google Chrome | 156.0.8078.80 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-2441 | Chromium: CVE-2026-2441 Use after free in CSS | 8.8 | 0.5446 | KEVExploited |
| Patch now | CVE-2026-5281 | Chromium: CVE-2026-5281 Use after free in Dawn | 8.8 | 0.1374 | KEVExploited |
| Patch now | CVE-2026-3910 | Chromium: CVE-2026-3910 Inappropriate implementation in V8 | 8.8 | 0.0268 | KEVExploited |
| Patch now | CVE-2026-3909 | Chromium: CVE-2026-3909 Out of bounds write in Skia | 9.6 | 0.0233 | KEVExploited |
| Urgent | CVE-2026-3538 | Chromium: CVE-2026-3538 Integer overflow in Skia | 9.6 | 0.0078 | None reported |
| Urgent | CVE-2026-3536 | Chromium: CVE-2026-3536 Integer overflow in ANGLE | 9.6 | 0.0070 | None reported |
| Urgent | CVE-2026-6296 | Chromium: CVE-2026-6296 Heap buffer overflow in ANGLE | 9.6 | 0.0056 | None reported |
| Urgent | CVE-2026-6298 | Chromium: CVE-2026-6298 Heap buffer overflow in Skia | 9.6 | 0.0047 | None reported |
| Urgent | CVE-2026-5275 | Chromium: CVE-2026-5275 Heap buffer overflow in ANGLE | 9.6 | 0.0045 | None reported |
| Urgent | CVE-2026-3545 | Chromium: CVE-2026-3545 Insufficient data validation in Navigation | 9.6 | 0.0041 | None reported |
| Urgent | CVE-2026-3916 | Chromium: CVE-2026-3916 Out of bounds read in Web Speech | 9.6 | 0.0040 | None reported |
| Urgent | CVE-2026-3062 | Chromium: CVE-2026-3062 Out of bounds read and write in Tint | 9.8 | 0.0038 | None reported |
| Urgent | CVE-2026-5289 | Chromium: CVE-2026-5289 Use after free in Navigation | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-5868 | Chromium: CVE-2026-5868 Heap buffer overflow in ANGLE | 9.6 | 0.0035 | None reported |
| Urgent | CVE-2026-3061 | Chromium: CVE-2026-3061 Out of bounds read in Media | 9.1 | 0.0034 | None reported |
| Urgent | CVE-2026-5277 | Chromium: CVE-2026-5277 Integer overflow in ANGLE | 9.6 | 0.0033 | None reported |
| Urgent | CVE-2026-5288 | Google Chrome: Use after free | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-5290 | Chromium: CVE-2026-5290 Use after free in Compositing | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-3931 | Chromium: CVE-2026-3931 Heap buffer overflow in Skia | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-5879 | Chromium: CVE-2026-5879 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0032 | None reported |
| Urgent | CVE-2026-4448 | Chromium: CVE-2026-4448 Heap buffer overflow in ANGLE | 9.6 | 0.0030 | None reported |
| Urgent | CVE-2026-4460 | Chromium: CVE-2026-4460 Out of bounds read in Skia | 9.6 | 0.0028 | None reported |
| Urgent | CVE-2026-4464 | Chromium: CVE-2026-4464 Integer overflow in ANGLE | 9.6 | 0.0028 | None reported |
| Urgent | CVE-2026-5283 | Chromium: CVE-2026-5283 Inappropriate implementation in ANGLE | 9.6 | 0.0027 | None reported |
| Urgent | CVE-2026-5874 | Chromium: CVE-2026-5874 Use after free in PrivateAI | 9.6 | 0.0026 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.