Chrome ES 152.0.7977.169 rolls out to Windows and Mac with fixes for 10 security issues

Google has released version 152.0.7977.169 of Chrome Extended Stable for Windows and Mac, resolving ten security vulnerabilities. This update includes two flaws rated as critical and eight rated as high severity. The browser maker announced the release on its official blog, noting that the fix will be distributed to users gradually over the coming days and weeks.

The risk

The advisory lists specific identifiers for the resolved issues. CVE-2026-110151 and CVE-2026-110922 are both classified as critical. The remaining eight vulnerabilities are classified as high severity. These include CVE-2026-110144, CVE-2026-110159, CVE-2026-110166, CVE-2026-110172, CVE-2026-110913, CVE-2026-110918, CVE-2026-110919, and CVE-2026-110921. Google states that access to detailed bug information may remain restricted until a majority of users have updated their browsers.

Who is exposed

This update applies specifically to the Extended Stable channel for desktop operating systems. According to the release notes, the affected platforms are Windows and Mac. Users on other channels or operating systems are not covered by this specific advisory. The gradual rollout means that not all users will receive the update immediately upon its announcement.

Cost and compliance

The source material does not specify any financial costs associated with this update. There are no mentions of regulatory compliance impacts or legal obligations tied to these specific vulnerabilities. The advisory focuses solely on the technical resolution of the security flaws within the browser software. No third-party licensing fees or support contract changes are indicated in the release information.

What should you do?

Verify that your Chrome installation has updated to version 152.0.7977.169. Monitor your browser settings to ensure automatic updates are enabled. If you manage multiple devices, check deployment logs to confirm the patch has been applied across your Windows and Mac fleets.

The background in plain language

Browser updates often address hidden flaws in how software processes data or renders web pages. Critical ratings usually indicate issues that could allow remote code execution or significant data leakage without user interaction. High ratings suggest serious risks that might require some user action to exploit. Teams usually prioritize these updates to maintain a secure computing environment and protect sensitive information from potential theft or manipulation.

Background: Remote code execution vulnerabilities

Small businesses face high remote code execution risks due to limited patching resources and complex dependencies. You can mitigate this by enforcing strict input validation, maintaining an accurate IT asset inventory, and requiring vendors to demonstrate automated security regression testing for all updates.

Read the full guide: Remote Code Execution Risks and Protection for Small Businesses

What to do and how to stay safe: Google Chrome

• Check your browser version number against the released update identifier.
• Ensure automatic update settings are active on all managed devices.
• Monitor internal logs to confirm successful patch deployment.
• Review browser extension permissions to reduce potential attack surfaces.

Step-by-step guide: Zero-Day Vulnerabilities Meaning: How Unpatched Flaws Bypass Your Defenses

General security guidance from the Vector Tribune newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Which operating systems are affected by this update?

The update applies to Windows and Mac desktops running Chrome Extended Stable.

How many critical vulnerabilities are fixed?

Two critical vulnerabilities, CVE-2026-110151 and CVE-2026-110922, are resolved.

When will users receive this update?

The update will roll out over the coming days and weeks.