Google Rolls Out Chrome 153 with Over 200 Security Patches, Including Active Zero‑Day Fix

Google has pushed version 153 of its Chrome browser to the Stable channel on Windows, macOS and Linux, bundling an unprecedented 230 security patches and a fix for CVE-2026-87491, a zero‑day flaw that security researchers say is currently being leveraged by attackers in the wild.

The disclosed vulnerability, identified as CVE-2026-87491, allowed remote code execution through specially crafted web content, giving malicious actors the ability to run arbitrary code on a victim's machine without user interaction. Early reports from cybersecurity firms indicated that exploit kits were already targeting the flaw, prompting an accelerated response from Google to mitigate the risk before wider compromise could occur.

Chrome’s update cadence typically follows a monthly cadence, delivering incremental improvements and security patches. This release, however, stands out for its sheer volume of fixes. By delivering the update through the Stable channel, Google ensures that the majority of users—whether on personal computers or enterprise devices—receive the patch automatically, provided automatic updates remain enabled.

The 230 fixes encompass a broad spectrum of issues, ranging from memory‑corruption bugs to sandbox bypasses. While Google does not disclose the full list of vulnerabilities in its public notes, the sheer number suggests a concerted effort to address both known weaknesses and those discovered through internal audits and external reporting programs. Industry analysts note that such a large batch of patches is unusual and reflects the heightened threat landscape surrounding web browsers.

Security experts advise users to verify that Chrome’s automatic update feature is active and to restart the browser promptly after the update is applied. Organizations with managed endpoints should confirm that their deployment tools have pushed the new version to all machines, especially those that may have been exposed to the exploited zero‑day. Failure to apply the patch could leave systems vulnerable to credential theft, ransomware deployment, or other malicious activity.

Looking ahead, Google has indicated that it will continue to monitor the situation for any residual threats related to CVE-2026-87491 and will issue additional patches if needed. The rapid rollout of Chrome 153 underscores the browser’s role as a critical line of defense on the modern internet and highlights the importance of timely updates in an environment where attackers continuously probe for unpatched software. Users and administrators alike are reminded that staying current with browser versions remains one of the simplest yet most effective ways to safeguard against emerging cyber threats.