3 reportsPriority Medium
Chrome vulnerability disclosures and updates
New vulnerabilities in Google Chrome and related software have been disclosed, with updates released to address them. UK organisations should assess their systems for potential exposure.
First report Latest
What is going on
- A vulnerability in Google Chrome allowed remote code execution via a crafted HTML page, reported in October 2026.
- Google released Chrome 157 for Android in November 2026 to address ongoing security issues.
- Multiple CVE identifiers were associated with the initial disclosure, indicating multiple related vulnerabilities.
- The updates affect both Chromium-based browsers and their derivatives like Microsoft Edge.
- Organisations are advised to check if affected versions are present in their environments.
- No specific impact details or confirmed exploitation methods have been provided yet.
- What to watch: Confirmation of whether any of the disclosed vulnerabilities have been actively exploited in the wild.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority LowType VulnerabilityLead report
Chrome for Android Update
- Priority MediumType Vulnerability
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
- Priority LowType Research & news
Google DeepMind just mathematically verified key parts of Signal

