# Google Chrome 153 patches actively exploited vulnerability

Published: 2026-09-09 · Severity: severe
Canonical: https://vorant.io/reports/caa2034b-0205-548f-8764-a7c47bcb573f/google-chrome-153-patches-actively-exploited-vulnerability

> Chrome 153.0.8010.36+ fixes multiple vulnerabilities; CVE-2026-87491 is actively exploited in the wild.

CERT-FR has published a security advisory for multiple vulnerabilities discovered in Google Chrome affecting all major platforms. The advisory identifies CVE-2026-87491 as actively exploited in the wild, elevating urgency for patching. The specific nature of the vulnerabilities is not detailed by the vendor; however, defenders should prioritize immediate updates to version 153.0.8010.36 or later on Linux and Windows systems, and 153.0.8010.37 or later on macOS. The full patch set encompasses 229 CVEs across the version range, indicating a significant security update cycle. Administrators should push automatic updates where possible and verify that legacy or pinned Chrome deployments are updated promptly, particularly given active exploitation of at least one flaw.

## Mentioned in this report

- Vulnerabilities: CVE-2026-87429, CVE-2026-87430, CVE-2026-87431, CVE-2026-87432, CVE-2026-87433, CVE-2026-87434, CVE-2026-87435, CVE-2026-87436, CVE-2026-87437, CVE-2026-87438, CVE-2026-87439, CVE-2026-87440, CVE-2026-87441, CVE-2026-87442, CVE-2026-87443, CVE-2026-87444, CVE-2026-87445, CVE-2026-87446, CVE-2026-87447, CVE-2026-87448, CVE-2026-87449, CVE-2026-87450, CVE-2026-87451, CVE-2026-87452, CVE-2026-87453, CVE-2026-87454, CVE-2026-87455, CVE-2026-87456, CVE-2026-87457, CVE-2026-87458, CVE-2026-87459, CVE-2026-87460, CVE-2026-87461, CVE-2026-87462, CVE-2026-87463, CVE-2026-87464, CVE-2026-87465, CVE-2026-87466, CVE-2026-87467, CVE-2026-87491 (KEV)

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1139

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/caa2034b-0205-548f-8764-a7c47bcb573f/google-chrome-153-patches-actively-exploited-vulnerability.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup