The Daily Commit · Section Edition Front Page PHP AI Dev EN DE FR ES

Independent. Nonpartisan. Untested in production.

Wednesday, September 9, 2026 HEISE DEVELOPER
Security!

Chrome 153 ships with two-week release cycle and 230 security fixes

Google has released Chrome 153, switching stable and beta channels to a two-week release cadence.

HEISE DEVELOPER — The update patches 230 vulnerabilities, including an actively exploited out-of-bounds write in the V8 engine. Enterprise Extended Stable keeps an eight-week rhythm with weekly security backports.

With Chrome 153, Google has activated the previously announced two-week cycle for new major versions. The stable build is rolling out for Windows, macOS and Linux; Android follows via Google Play. Version numbers are 153.0.8010.36 on Linux and Windows, and 153.0.8010.37 on macOS. Since 2021, major Chrome releases had shipped every four weeks. Weekly security updates continue unchanged.

The release closes 230 security holes. The most urgent is CVE-2026-87491, an out-of-bounds write in V8, Chrome's JavaScript and WebAssembly engine. Google rates the flaw as medium but has already observed an exploit through crafted web pages. Five further flaws are rated critical: four in WebGL and one in the Cast component. Additional high-risk bugs affect ANGLE, PDFium and codec components. Users can check their version via the menu under Help, About Google Chrome; a browser restart is usually required after the update downloads.

On the feature side, Chrome 153 introduces the HTML elements <camera> and <microphone>, letting web apps request access to only one of the two devices. The elements render a browser-controlled UI and trigger the permission prompt only after a deliberate click. Existing permissions of installed web apps remain untouched. Developers also get CSS extensions for single-axis scroll containers and new JavaScript methods for iterating multiple data series in parallel.

Google says the shorter cycle delivers features and fixes faster while bundling fewer changes per release, making regressions easier to isolate. The Extended Stable channel for enterprises and Chromium embedders stays on eight weeks between major versions, with weekly security backports. Microsoft has shipped Edge every two weeks since version 152, and Mozilla moved Firefox to a two-week cadence with version 155; Firefox ESR remains the long-term option.

Read the original source (German) ↗

Rate this article: 0

Readers’ Forum

No contributions yet — open the debate.

◀ Briefs — Page D1

All stories real, just louder · The Daily Commit · Screen edition · Imprint · Privacy Policy