CERT-FR Flags Multiple Chrome Vulnerabilities
CERT-FR advises patching Google Chrome due to numerous unspecified vulnerabilities fixed in versions 157.0.8103.78/79 and Extended Stable 156.0.8078.100.
Sourcecert.cyber.gouv.fr — open the original
What to check
- Applies to
- The 40 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation
- No exploitation in the wild and no public exploit is recorded for the CVEs named.
CERT-FR issued an advisory summarizing a Google Chrome stable channel security update addressing a large number of vulnerabilities (over 80 CVEs referenced). The vendor bulletin does not specify the exact nature of the security impact for each flaw, but CERT-FR notes that exploitation could allow an attacker to trigger an unspecified security issue, which in the context of browser vulnerabilities typically encompasses memory corruption, sandbox escape, or information disclosure risks.
Affected systems include Chrome Extended Stable prior to version 156.0.8078.100 for Windows and Mac, and standard Chrome channel prior to 157.0.8103.78 for Windows/Linux and 157.0.8103.79 for Mac. No in-the-wild exploitation is indicated in this advisory. Defenders should apply the vendor's update through normal browser update mechanisms as soon as possible, consistent with standard Chrome patch cadence, and verify managed/enterprise Chrome deployments are updated to the fixed versions referenced in Google's stable and extended-stable channel release blogs dated 11 November 2026.
Mentioned in this report
Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1498
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,433 reports from 149 sources, 661 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs