Google has launched a new update, Chrome 153, for Windows, macOS, and Linux platforms, aiming to resolve 16 security issues, including two critical vulnerabilities in Dawn and WebGL. These updates are part of Google’s ongoing efforts to enhance browser security against potential threats.
Critical Vulnerabilities Addressed
Chrome 153 is rolling out as version 153.0.8010.52/.53 for Windows and macOS, while Linux users will receive version 153.0.8010.52. Among the most significant issues fixed is a critical use-after-free vulnerability in Dawn, a component of Chrome’s WebGPU graphics API. This vulnerability, identified as CVE-2026-93374, poses risks of memory corruption, browser crashes, or arbitrary code execution.
Another critical flaw, CVE-2026-93372, involves a buffer overflow in WebGL, a tool that enables interactive 2D and 3D graphics in browsers. Buffer overflows can lead to memory overwriting and program execution alteration, making it crucial for users to update their browsers promptly.
Details on Reporting and Fixing
The Dawn vulnerability was reported by Florian Schweitzer on April 8, 2026, while the WebGL issue was internally identified by Google on August 17, 2026. Google has not disclosed the reward for these findings, typical when allowing users time to update before exploit details become public.
The update also rectifies eight high-severity vulnerabilities across various Chrome components. These include issues like incorrect reference resolution in Tracing, use-after-free and buffer overflow in PDFium, improper state validation in Skia, and a use-after-free error in Extensions.
Importance of Immediate Updates
Beyond critical issues, Chrome 153 addresses medium- and low-severity problems, such as race conditions, server-side request forgery, information leaks, and UI misrepresentation. Users are advised to update their browsers by navigating to the browser menu, selecting Help, and then About Google Chrome. Although updates are downloaded automatically, a browser restart is required to apply them.
Organizations should ensure prompt deployment of this update across managed systems to mitigate risks from routine web activities and potential attacks. Google maintains restrictions on bug details and associated links until a significant portion of the user base has updated their browsers.
In conclusion, the Chrome 153 update is a critical step in safeguarding users against potential cybersecurity risks, emphasizing the importance of timely software updates.
