Patch Release: Google Chrome 153.0.8010.36/37 for Windows

Patch Release: Google Chrome 153.0.8010.36/37 for Windows

Google has released Chrome version 153.0.8010.36/37 for Windows. This release includes 230 security fixes, including an actively exploited zero-day vulnerability in the V8 JavaScript and WebAssembly engine. Google has confirmed that an exploit for CVE-2026-87491 exists in the wild.

Applying this update is strongly recommended to protect systems against known vulnerabilities and active exploitation.


Security Highlights  


The following are the key critical and actively exploited vulnerabilities addressed in this release:

CVE ID

Vulnerability

Severity

CVE-2026-87491

Out-of-bounds write in V8

Medium – Actively Exploited

CVE-2026-87464

Use after free in WebGL

Critical

CVE-2026-87488

Use after free in WebGL

Critical

CVE-2026-87438

Out-of-bounds write in WebGL

Critical

CVE-2026-87527

Buffer overflow in WebGL

Critical

CVE-2026-87628

Use after free in Cast

Critical


CVE-2026-87491 can allow a remote attacker to execute arbitrary code inside the Chrome sandbox through a crafted HTML page. Google has acknowledged that this vulnerability is being actively exploited.

In addition to these vulnerabilities, the release addresses numerous other security issues across Chrome and Chromium components.


For more information, refer to:

https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html


Patch Details  

Windows 64-bit Patch Details  

Patch ID: 363523
Bulletin ID: TU-017
Patch Description: Google Chrome (x64) (153.0.8010.36,153.0.8010.37)


Windows 32-bit Patch Details  

Patch ID: 363522
Bulletin ID: TU-017
Patch Description: Google Chrome (153.0.8010.36,153.0.8010.37)


To install this update on your Windows machines, initiate a sync between the Central Patch Repository and the Patch Manager Plus server. Once the sync is complete, search for the above Patch IDs or Bulletin ID and deploy them to your target systems.

We recommend deploying these patches as soon as possible, particularly because CVE-2026-87491 is being actively exploited in the wild. Updating to Chrome 153.0.8010.36/37 helps protect systems against this zero-day and several other critical security vulnerabilities.


Regards,
The ManageEngine Team
      • Sticky Posts

      • Windows all set to initiate automatic upgrade to the latest 1909 feature pack

        Hi everyone, The support for Windows 10 Home, Pro, Pro Education, and Pro for Workstations editions on 1809 ends May 12, 2020. Microsoft pushes computers running on the October 2018 update, version 1809, to update to the November 2019 update, version 1909 automatically. The process that will initiate this automatic update will be rolled out real soon, says Microsoft.  In case of such automatic updates in a diverse network environment, there are high chances of incompatibilities. If you are using
      • Planned maintenance of our US Data center on Dec 19th & 21st

        Dear Customers, We have planned a network infrastructure upgrade on our primary Data center in the USA on Dec 19, 2019 from 6:30 PM to 10:00 PM PST and Dec 21st, 2019 from 6:30 PM to 10:00 PM PST. During this upgrade, we will be switching Patch Manager Plus, Mobile Device Manager Plus, and Remote Access Plus from the endpoint management suite to our secondary Data Center to ensure that our services continue functioning. We do not expect any disturbances to the services during this period, but should
      • [Free Seminar] Secure your organization's endpoints against the latest cyberattacks and security vulnerabilities

        Be it WannaCry, Meltdown, Spectre or Petya each year bears witness to new cyberattacks and security vulnerabilities, and the year 2019 is no different. From the BlueKeep vulnerability that affects over a million systems, to the ZombieLoad attack that affects nearly every Intel chip since 2011, IT teams across the globe face an uphill battle this year to secure their organization's desktops and mobile devices.  Organizations irrespective of the industry they cater to, are often caught unawares by
      • Share your thoughts about Patch Manager Plus and earn a gift card!

        Dear folks, Thanks for your continued support of Patch Manager Plus. We would like to hear how we are faring. You can review us on IT Central Station here:  https://www.itcentralstation.com/lp/vendor_invite?product_id=manageengine-patch-manager-plus Also, you can review us on Capterra:  http://ca.gartnerdigitalmarkets.com/Patch-Manager-Plus-179288-SS-01_Write_a_Review.html What more, you will be entitled for a gift coupon worth $10 upon reviewing us on Capterra! ​Keep your reviews coming, your reviews
      • Join us for an Endpoint Security seminar this November!

        2018 is coming to an end but the fight against this year's cyberthreats is far from over. ManageEngine brings you an Endpoint Security and Management seminar where you'll have a chance to work with product experts on formulating a plan to protect your endpoints from different malware, including ransomware. Join us at any of our one-day complimentary seminars in Mumbai and Bangalore and show these threats who's boss!  Register now to save your spot! What's in it for you? Discover the top cybersecurity

                        New to ADSelfService Plus?