HKCERT reports multiple Google Chrome vulnerabilities, fixed in 157.0.8103.78

What happened

According to HKCERT, multiple vulnerabilities were identified in Google Chrome. In its bulletin of 12 November 2026, HKCERT rates the risk as Medium and the type as Clients - Browsers. HKCERT says a remote attacker could exploit some of these vulnerabilities to cause a denial of service condition, elevation of privilege, security restriction bypass, sensitive information disclosure, remote code execution and data manipulation on the targeted system. HKCERT: Google Chrome Multiple Vulnerabilities

The bulletin lists a consecutive run of CVE identifiers, from CVE-2026-126840 to CVE-2026-126922. It names Google Chrome as the source and points to a Google Chrome Releases post as a related link. This advisory relies only on the HKCERT bulletin. The Google post itself was not among the sources provided.

Not confirmed from the sources: which CVE corresponds to which impact, the severity of individual CVEs, the affected components, who found the flaws, and whether any of them have been exploited. The bulletin does not state any exploitation.

Am I affected?

According to HKCERT, the affected versions are:

• Google Chrome prior to 157.0.8103.78 (Linux)
• Google Chrome prior to 157.0.8103.78/.79 (Mac)
• Google Chrome prior to 157.0.8103.78/.79 (Windows)

If your Chrome is at or above those versions, the bulletin does not list it as affected. Other Chromium-based browsers are not mentioned in the source, so their status is not confirmed.

What to do now

1. Check your installed Chrome version (Help, then About Google Chrome).
2. If it is older than the versions above, update to Chrome 157.0.8103.78 (Linux) or 157.0.8103.78/.79 (Mac and Windows) or later, as HKCERT advises applying the fixes issued by the vendor.
3. Restart the browser so the update takes effect.
4. Before installing, HKCERT suggests visiting the software vendor website for more details.
5. For managed fleets, check that your deployment tooling has picked up the fixed version. The source gives no further deployment guidance.

Sources

• HKCERT: Google Chrome Multiple Vulnerabilities