Google has rolled out Chrome version 153.0.8010.52/.53 for Windows and macOS (Linux gets version.52), closing 16 security holes across the browser. Two of those flaws have been designated critical—one in Dawn, Chrome’s WebGPU graphics API, and another in WebGL, which handles interactive 2D and 3D web graphics. These are among the most serious issues patched.
Critical Vulnerabilities in Dawn & WebGL
The most alarming is a use-after-free bug in Dawn (CVE-2026-93374), that could allow attackers to run arbitrary code or crash the browser by exploiting memory already freed. Another critical bug is a buffer overflow in WebGL (CVE-2026-93372) where malformed graphics data might overwrite memory and hijack control of program flow. In both cases, Google held off releasing details until a sufficient number of users could update.
High and Medium Risks Across Core Components
Beyond the critical flaws, Chrome 153 addresses eight high-severity vulnerabilities. That includes use-after-free and buffer overflow issues in PDFium; misvalidated state in Skia graphics library; incorrect reference resolution in the Tracing subsystem; misuse of authorization checks in ORB; a type confusion risk in the V8 JavaScript runtime; and a use-after-free vulnerability affecting Chrome Extensions.
Other fixes cover medium- and low-severity issues. These range from race conditions in the FileSystem module, SSRF risks via Omnibox, out-of-bounds reads in DataTransfer, improper authorization in Storage, information leaks in several components, to UI spoofing in WebAppInstalls.
Google has said technical info and exploit details for the most serious flaws will stay under wraps until the majority of Chrome users have updated—standard practice to limit attackers’ window of opportunity.
What You Should Do Now
If you’re using Chrome on any platform, update immediately. Open the browser menu → Help → About Google Chrome. Even though updates often download in the background, a restart is required to apply them. For organizations and managed environments, rapid deployment is especially critical, as browser flaws are among the most common entry points via phishing, malicious ads, or compromised sites.
We’re now seeing deeper graphics-API flaws (WebGPU / Dawn) getting targeted with high severity, alongside more established attack avenues like WebGL and V8. That makes these updates among the most urgent in recent Chrome versions.
