Google Chrome 156 Stable Updates Fix 353 Security Issues

P2 — VALIDATE AND UPDATENot provided by the authority · Not provided by the authorityEXPLOITATION: NOT STATED

Quick Answer

Google released Chrome 156 stable for desktop and Android with 353 listed security fixes. Inventory browser channels, deploy the platform-specific fixed build, restart where required, verify the resulting version and policy state, and retain deployment evidence.

Confirm Scope And Apply The Supported Remediation

What to do now: Inventory desktop and Android Chrome versions and channels; deploy 156.0.8078.47 or 156.0.8078.48 as applicable through the supported channel; restart where required; validate the resulting version, policy, extensions, and workflows; and retain evidence.

Open the authoritative advisory

Last verified: 2026-10-21 UTC. Recheck the authoritative advisory and supported distribution channel before changing production.

Scope And Authority

Product scopeGoogle Chrome Stable for Windows, macOS, Linux, and Android
AdvisoryChrome 156 Stable for Desktop / Chrome 156 for Android
CVEsCVE-2026-112992, CVE-2026-112993, CVE-2026-112994, CVE-2026-112995, CVE-2026-112996, CVE-2026-112997, CVE-2026-112998, CVE-2026-112999, CVE-2026-113000, CVE-2026-113001, CVE-2026-113002, CVE-2026-113003, CVE-2026-113004, CVE-2026-113005, CVE-2026-113006, CVE-2026-113007, CVE-2026-113008, CVE-2026-113009, CVE-2026-113010, CVE-2026-113011, CVE-2026-113012, CVE-2026-113013, CVE-2026-113014, CVE-2026-113015, CVE-2026-113016, CVE-2026-113017, CVE-2026-113018, CVE-2026-113019, CVE-2026-113020, CVE-2026-113021, CVE-2026-113022, CVE-2026-113023, CVE-2026-113024, CVE-2026-113025, CVE-2026-113026, CVE-2026-113027, CVE-2026-113028, CVE-2026-113029, CVE-2026-113030, CVE-2026-113031, CVE-2026-113032, CVE-2026-113033, CVE-2026-113034, CVE-2026-113035, CVE-2026-113036, CVE-2026-113037, CVE-2026-113038, CVE-2026-113039, CVE-2026-113040, CVE-2026-113041, CVE-2026-113042, CVE-2026-113043, CVE-2026-113044, CVE-2026-113045, CVE-2026-113046, CVE-2026-113047, CVE-2026-113048, CVE-2026-113049, CVE-2026-113050, CVE-2026-113051, CVE-2026-113052, CVE-2026-113053, CVE-2026-113054, CVE-2026-113055, CVE-2026-113056, CVE-2026-113057, CVE-2026-113058, CVE-2026-113059, CVE-2026-113060, CVE-2026-113061, CVE-2026-113062, CVE-2026-113063, CVE-2026-113064, CVE-2026-113065, CVE-2026-113066, CVE-2026-113067, CVE-2026-113068, CVE-2026-113069, CVE-2026-113070, CVE-2026-113071, CVE-2026-113072, CVE-2026-113073, CVE-2026-113074, CVE-2026-113075, CVE-2026-113076, CVE-2026-113077, CVE-2026-113078, CVE-2026-113079, CVE-2026-113080, CVE-2026-113081, CVE-2026-113082, CVE-2026-113083, CVE-2026-113084, CVE-2026-113085, CVE-2026-113086, CVE-2026-113087, CVE-2026-113088, CVE-2026-113089, CVE-2026-113090, CVE-2026-113091, CVE-2026-113092, CVE-2026-113093, CVE-2026-113094, CVE-2026-113095, CVE-2026-113096, CVE-2026-113097, CVE-2026-113098, CVE-2026-113099, CVE-2026-113100, CVE-2026-113101, CVE-2026-113102, CVE-2026-113103, CVE-2026-113104, CVE-2026-113105, CVE-2026-113106, CVE-2026-113107, CVE-2026-113108, CVE-2026-113109, CVE-2026-113110, CVE-2026-113111, CVE-2026-113112, CVE-2026-113113, CVE-2026-113114, CVE-2026-113115, CVE-2026-113116, CVE-2026-113117, CVE-2026-113118, CVE-2026-113119, CVE-2026-113120, CVE-2026-113121, CVE-2026-113122, CVE-2026-113123, CVE-2026-113124, CVE-2026-113125, CVE-2026-113126, CVE-2026-113127, CVE-2026-113128, CVE-2026-113129, CVE-2026-113130, CVE-2026-113131, CVE-2026-113132, CVE-2026-113133, CVE-2026-113134, CVE-2026-113135, CVE-2026-113136, CVE-2026-113137, CVE-2026-113138, CVE-2026-113139, CVE-2026-113140, CVE-2026-113141, CVE-2026-113142, CVE-2026-113143, CVE-2026-113144, CVE-2026-113145, CVE-2026-113146, CVE-2026-113147, CVE-2026-113148, CVE-2026-113149, CVE-2026-113150, CVE-2026-113151, CVE-2026-113152, CVE-2026-113153, CVE-2026-113154, CVE-2026-113155, CVE-2026-113156, CVE-2026-113157, CVE-2026-113158, CVE-2026-113159, CVE-2026-113160, CVE-2026-113161, CVE-2026-113162, CVE-2026-113163, CVE-2026-113164, CVE-2026-113165, CVE-2026-113166, CVE-2026-113167, CVE-2026-113168, CVE-2026-113169, CVE-2026-113170, CVE-2026-113171, CVE-2026-113172, CVE-2026-113173, CVE-2026-113174, CVE-2026-113175, CVE-2026-113176, CVE-2026-113177, CVE-2026-113178, CVE-2026-113179, CVE-2026-113180, CVE-2026-113181, CVE-2026-113182, CVE-2026-113183, CVE-2026-113184, CVE-2026-113185, CVE-2026-113186, CVE-2026-113187, CVE-2026-113188, CVE-2026-113189, CVE-2026-113190, CVE-2026-113191, CVE-2026-113192, CVE-2026-113193, CVE-2026-113194, CVE-2026-113195, CVE-2026-113196, CVE-2026-113197, CVE-2026-113198, CVE-2026-113199, CVE-2026-113200, CVE-2026-113201, CVE-2026-113202, CVE-2026-113203, CVE-2026-113204, CVE-2026-113205, CVE-2026-113206, CVE-2026-113207, CVE-2026-113208, CVE-2026-113209, CVE-2026-113210, CVE-2026-113211, CVE-2026-113212, CVE-2026-113213, CVE-2026-113214, CVE-2026-113215, CVE-2026-113216, CVE-2026-113217, CVE-2026-113218, CVE-2026-113219, CVE-2026-113220, CVE-2026-113221, CVE-2026-113222, CVE-2026-113223, CVE-2026-113224, CVE-2026-113225, CVE-2026-113226, CVE-2026-113227, CVE-2026-113228, CVE-2026-113229, CVE-2026-113230, CVE-2026-113231, CVE-2026-113232, CVE-2026-113233, CVE-2026-113234, CVE-2026-113235, CVE-2026-113236, CVE-2026-113237, CVE-2026-113238, CVE-2026-113239, CVE-2026-113240, CVE-2026-113241, CVE-2026-113242, CVE-2026-113243, CVE-2026-113244, CVE-2026-113245, CVE-2026-113246, CVE-2026-113247, CVE-2026-113248, CVE-2026-113249, CVE-2026-113250, CVE-2026-113251, CVE-2026-113252, CVE-2026-113253, CVE-2026-113254, CVE-2026-113255, CVE-2026-113256, CVE-2026-113257, CVE-2026-113258, CVE-2026-113259, CVE-2026-113260, CVE-2026-113261, CVE-2026-113262, CVE-2026-113263, CVE-2026-113264, CVE-2026-113265, CVE-2026-113266, CVE-2026-113267, CVE-2026-113268, CVE-2026-113269, CVE-2026-113270, CVE-2026-113271, CVE-2026-113272, CVE-2026-113273, CVE-2026-113274, CVE-2026-113275, CVE-2026-113276, CVE-2026-113277, CVE-2026-113278, CVE-2026-113279, CVE-2026-113280, CVE-2026-113281, CVE-2026-113282, CVE-2026-113283, CVE-2026-113284, CVE-2026-113285, CVE-2026-113286, CVE-2026-113287, CVE-2026-113288, CVE-2026-113289, CVE-2026-113290, CVE-2026-113291, CVE-2026-113292, CVE-2026-113293, CVE-2026-113294, CVE-2026-113295, CVE-2026-113296, CVE-2026-113297, CVE-2026-113298, CVE-2026-113299, CVE-2026-113300, CVE-2026-113301, CVE-2026-113302, CVE-2026-113303, CVE-2026-113304, CVE-2026-113305, CVE-2026-113306, CVE-2026-113307, CVE-2026-113308, CVE-2026-113309, CVE-2026-113310, CVE-2026-113311, CVE-2026-113312, CVE-2026-113313, CVE-2026-113314, CVE-2026-113315, CVE-2026-113316, CVE-2026-113317, CVE-2026-113318, CVE-2026-113319, CVE-2026-113320, CVE-2026-113321, CVE-2026-113322, CVE-2026-113323, CVE-2026-113324, CVE-2026-113325, CVE-2026-113326, CVE-2026-113327, CVE-2026-113328, CVE-2026-113329, CVE-2026-113330, CVE-2026-113331, CVE-2026-113332, CVE-2026-113333, CVE-2026-113334, CVE-2026-113335, CVE-2026-113336, CVE-2026-113337, CVE-2026-113338, CVE-2026-113339, CVE-2026-113340, CVE-2026-113341, CVE-2026-113342, CVE-2026-113343, CVE-2026-113344
Authoritative release date2026-10-20 20:09:05.710 UTC
Authority revision date2026-10-20 20:45:52.575 UTC
Affected versionsDesktop Chrome stable builds before 156.0.8078.47 on Linux and before 156.0.8078.47 or 156.0.8078.48 on Windows and macOS; Android Chrome builds before 156.0.8078.47.
Fixed versionChrome 156.0.8078.47 on Linux and Android, or 156.0.8078.47/156.0.8078.48 on Windows and macOS, as delivered for the supported channel
CVSS base scoreNot provided by the authority
CVSS severityNot provided by the authority
Exploitation statusNot stated by Google in these release posts; no exploitation claim is inferred.

What Changed

Google released Chrome 156 stable for desktop with 353 listed security fixes, including six issues labeled Critical by Google, and released Android 156.0.8078.47 with the same security fixes unless otherwise noted on the desktop release page.

What To Validate Now

  1. Inventory. Identify managed and unmanaged Chrome installations, operating system, release channel, installed version, update policy, restart state, management platform, and owner.
  2. Establish applicability. Match each installation to the operating-system and channel-specific fixed version. Do not apply desktop build numbering to ChromeOS or infer that an update has taken effect before restart and version verification.
  3. Remediate. Deploy the supported Chrome 156 stable build through Google or the established enterprise channel and restart the browser where required to load the new binary.
  4. Validate. Confirm the resulting version, channel, policy, restart state, extension and sign-in behavior, and representative web workflows; retain management and endpoint evidence.
  5. Retain evidence. Preserve asset and owner identifiers, the applicability decision, before-and-after versions, change approval, installation output, validation results, and any exception or rollback record.

Operational Cautions

Google may restrict access to vulnerability details until most users have updated and may retain restrictions where third-party dependencies are involved. The release posts do not state exploitation and do not publish CVSS base scores; severity labels in bounty entries are not substituted for CVSS severity.

Evidence To Retain

  • Exact product, release stream, package or application version, enabled feature, environment, and accountable owner.
  • UTC timestamps, authority revision, approved change record, installer or package-manager output, and resulting version.
  • Relevant logs and monitoring evidence, test results, exceptions, compensating controls, and rollback decisions.

Related TechGeeks Resources

Authoritative References

Correction policy: If the authority changes affected versions, fixed versions, severity, exploitation information, mitigations, or required action, TechGeeks will update this notice and its verification date.