Chromium Extended Stable update 156.0.8078.88 addresses 55 security vulnerabilities
Google has released a major security update for the Chromium Extended Stable channel, patching 55 vulnerabilities including three critical CVEs.
Summary
Google has deployed version 156.0.8078.88 to the Chromium Extended Stable channel for Windows and Mac desktop users. This update is a significant security maintenance release designed to mitigate a large volume of identified vulnerabilities.
The release addresses a total of 55 security fixes, ranging from low to critical severity. Google noted that specific bug details and links may remain restricted until a majority of the user base has successfully updated to prevent exploitation of the disclosed flaws.
Security vulnerability breakdown
- Critical Vulnerabilities: The update patches three critical-severity flaws, specifically CVE-2026-118306, CVE-2026-121156, and CVE-2026-76024.
- High Severity Fixes: A large portion of the release focuses on high-severity vulnerabilities, including a significant cluster of CVEs in the 2026-1192xx, 2026-1210xx, 2026-1211xx, and 2026-760xx ranges.
- Severity Distribution: Beyond the critical and high-priority patches, the update also resolves several medium-severity issues (CVE-2026-119272, CVE-2026-121135) and one low-severity issue (CVE-2026-121141).
- Information Restriction Policy: Google maintains a policy of withholding full technical details for certain bugs if they reside in third-party libraries that have not yet been patched by other dependent projects.
Why it matters
As the upstream foundation for many open-source browsers and web engines, these security patches are vital for the broader ecosystem. Developers of Chromium-based browsers and tools must track these updates to ensure their downstream distributions remain protected against these critical and high-severity exploits.
What to do
- Windows and Mac desktop users on the Chromium Extended Stable channel should update to version 156.0.8078.88.
- Apply this update promptly to patch 55 security vulnerabilities, including three critical-severity flaws.
- Watch for the update to become available through your browser's normal update mechanism if it has not appeared yet.
Original reference: chromereleases.googleblog.com →