Chrome 136 is now available: security fixes and APK download checks on Android

Google has just released Chrome 136, a new stable version of its web browser for desktop and mobile. The new version is 136.0.7103.59 on Linux, 136.0.7103.60 on Android, and 136.0.7103.48/49 on Windows […] Thank you for being a Ghacks reader. The post Chrome 136 is now available: security fixes and APK download checks on Android appeared first on gHacks Technology News.

Apr 30, 2025 - 17:48

Chrome 136 is now available: security fixes and APK download checks on Android

Google has just released Chrome 136, a new stable version of its web browser for desktop and mobile. The new version is 136.0.7103.59 on Linux, 136.0.7103.60 on Android, and 136.0.7103.48/49 on Windows and Mac devices.

You can check out our coverage of Chrome 135's release here, in case you missed it or want to look at the major changes again.

Chrome 136: security update

The new version of the browser patches eight security issues. Google lists four of those on the official Chrome Releases blog. The aggregate severity rating is high and Google does not mention active exploits.

Security issues are patched in HTML and the Developer Tools. The four unmentioned security issues were discovered internally.

Other changes

Google Chrome 136

Android APK download checks

The big change in Chrome 136 introduces malicious APK checks in Chrome for Android. The feature submits information about APK file downloads to Google to find out if the files include malicious code.

Chrome 136 is set to collect telemetry about the process only at this time. Google notes, however, that future versions will show warnings and block downloads of malicious APK files in Chrome automatically to "protect users against mobile malware".

Furthermore, checks are currently only performed if users have enabled Enhanced Protection in Google Safe Browsing.

Partitioning against Browser history leaks

Another highlight is the new partitioning of the visited links history. Browser history leaks have been a problem for a long time. In 2018, for instance, researchers found a loophole that allowed them to find out if a particular site was visited by a user.

The :visited anchor element is now restricted. It is only used if it has "been clicked from this top-level site and frame origin before". In other words, sites can only check visited if the link was clicked previously on the site itself.

Google says: "By only styling links that have been clicked on this site and frame before, the many side-channel attacks that have been developed to obtain :visited links styling information are now obsolete, as they no longer provide sites with new information about users".

Closing Words

Google Chrome is already available. Most non-managed installations should be updated automatically. You can speed things up by selecting Menu > Help > About Google Chrome. This should download and install the new update immediately on the system.

Now You: what is your take on the new release? Do you find the new security features useful? Feel free to leave a comment down below.

Thank you for being a Ghacks reader. The post Chrome 136 is now available: security fixes and APK download checks on Android appeared first on gHacks Technology News.