# Multiple vulnerabilities in Google Chrome 153

Published: 2026-09-16 · Severity: elevated
Canonical: https://vorant.io/reports/1b173713-e712-56ea-b480-1651b4cb032f/multiple-vulnerabilities-in-google-chrome-153

> Google Chrome versions before 153.0.8010.47/48 contain multiple unspecified security flaws requiring immediate update.

CERT-FR has published a security advisory addressing multiple vulnerabilities in Google Chrome affecting Windows, Linux, and macOS systems. The vulnerabilities impact Chrome versions prior to 153.0.8010.47 on Windows and Linux, and 153.0.8010.48 on macOS. The vendor has not publicly disclosed the specific nature of these flaws beyond that they permit unspecified security issues. Google released patched versions on September 15, 2026. Defenders should immediately update Chrome installations to the fixed versions to mitigate risk. The advisory references 42 CVE identifiers, though detailed technical descriptions are not provided in the CERT-FR notice itself; defenders should consult Google's official release notes for complete vulnerability details.

## Mentioned in this report

- Vulnerabilities: CVE-2026-91708, CVE-2026-91709, CVE-2026-91710, CVE-2026-91711, CVE-2026-91712, CVE-2026-91713, CVE-2026-91714, CVE-2026-91715, CVE-2026-91716, CVE-2026-91717, CVE-2026-91718, CVE-2026-91719, CVE-2026-91720, CVE-2026-91721, CVE-2026-91722, CVE-2026-91723, CVE-2026-91724, CVE-2026-91725, CVE-2026-91726, CVE-2026-91727, CVE-2026-91728, CVE-2026-91729, CVE-2026-91730, CVE-2026-91731, CVE-2026-91732, CVE-2026-91733, CVE-2026-91734, CVE-2026-91735, CVE-2026-91736, CVE-2026-91737, CVE-2026-91738, CVE-2026-91739, CVE-2026-91740, CVE-2026-91741, CVE-2026-91742, CVE-2026-91743, CVE-2026-91744, CVE-2026-91745, CVE-2026-91746, CVE-2026-91747

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1178

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/1b173713-e712-56ea-b480-1651b4cb032f/multiple-vulnerabilities-in-google-chrome-153.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup