# Chromium Extended Stable update 156.0.8078.96 addresses 11 security vulnerabilities

> **Key takeaway:** Google has released a critical security update for the Chromium Extended Stable channel, patching 10 high-severity and one medium-severity CVEs.

**Published:** 2026-11-09T22:37:25.001000+00:00 
**Source:** Google Chromium Engineering Releases 
**Category:** bigtech-foss 
**Canonical URL:** https://fosswire.org/news/chromium-extended-stable-update-1560807896-addresses-11-secu.html 

## Summary
Google has issued an update to the Chromium Extended Stable channel for desktop users on Windows and macOS. The release, version 156.0.8078.96, is intended to provide a stabilized environment for users who require a more consistent release cycle than the standard stable channel.

This specific update focuses heavily on security remediation, addressing a total of 11 vulnerabilities. While the update is rolling out over several days and weeks, it is critical for users relying on the Extended Stable branch to ensure their systems are protected against the newly identified exploits.

## Security vulnerability breakdown
- **Severity Distribution:** The update contains 10 high-severity security fixes and 1 medium-severity fix.
- **Identified CVEs:** The release addresses multiple high-severity vulnerabilities including CVE-2026-121068, CVE-2026-121076, CVE-2026-121095, CVE-2026-121208, CVE-2026-121213, CVE-2026-121233, CVE-2026-125345, CVE-2026-125346, CVE-2026-125347, and CVE-2026-125350.
- **Medium Severity:** The update also patches CVE-2026-121184, which is classified as a medium-severity issue.
- **Information Restriction:** Google is withholding specific bug details and direct links to the vulnerabilities until a majority of the user base has successfully applied the fixes.

## Why it matters
As Chromium serves as the upstream foundation for many open-source browsers and web engines, these security patches are vital for the broader ecosystem. Developers of Chromium-based distributions and tools must monitor these releases to ensure their downstream products remain secure against these high-severity exploits.