Google Chrome: Extended Stable update fixes 10 security flaws including two critical CVEs (CVE-2026-110151, CVE-2026-110922)
Severity: critical · Patch status: patched · Since 2026-10-15 · CVE-2026-110144, CVE-2026-110151, CVE-2026-110159, CVE-2026-110166, CVE-2026-110172, CVE-2026-110913, CVE-2026-110914, CVE-2026-110915, CVE-2026-110916, CVE-2026-110917, CVE-2026-110918, CVE-2026-110919, CVE-2026-110920, CVE-2026-110921, CVE-2026-110922
On 2026-10-15 Google released Chrome Extended Stable 152.0.7977.169 for Windows and Mac, fixing 10 security vulnerabilities: two Critical (CVE-2026-110151, CVE-2026-110922) and eight High severity issues (CVE-2026-110144, CVE-2026-110159, CVE-2026-110166, CVE-2026-110172, CVE-2026-110913, CVE-2026-110918, CVE-2026-110919, CVE-2026-110921). Google has not disclosed vulnerability types or exploit details, keeping bug information restricted until a majority of users are updated, which is standard practice and does not indicate active exploitation. No in-the-wild exploitation is reported. The update rolls out over the coming days/weeks; organisations managing Chrome via Extended Stable should ensure deployment of this build.
What to do
- Deploy Chrome 152.0.7977.169 (Extended Stable) to all managed Windows and Mac endpoints as soon as it is available
- Verify fleet versions via endpoint management/MDM and force browser updates where auto-update is disabled
- Review whether any internal web apps rely on Extended Stable users and prioritise high-risk user groups
- Monitor the Chrome Releases blog for the corresponding Stable channel release and any exploitation reports
Fixed versions
Sources
All live incidents on Threat Watch