This week in browsers: a big Chrome security update, Apple sign-in for Edge and a rebuilt Vivaldi blocker

Chrome 157 fixes 213 security bugs. Google's stable channel update of 3 November includes 213 security fixes. Impress Watch counts seven rated Critical and reports none being exploited in the wild. The most serious ones are in the parts of Chrome that draw graphics and manage memory. Google Chrome updates itself, but the fixes only apply after a restart.

Firefox fixes one serious bug. Mozilla's security advisory covers a flaw it rates High in the code that lays out web pages. The same release on 3 November also restores passkey sign-in on sites that share passkeys across related domains, such as Facebook and Instagram, and fixes Windows crashes tied to some antivirus software. Mozilla Firefox users should update.

Brave gets Chrome's fixes and an AI safety fix. Brave's release notes for 5 November bring in the same security fixes as Chrome 157. They also fix a problem with Leo, Brave's AI assistant: a compromised chat window could approve Leo's actions without you clicking anything. If you use Brave, update it so you get both.

Chrome 157 redesigns the menu and widens AI autofill. Impress Watch and HelenTech, which summarises the enterprise release notes, both report a single redesigned "More" menu and autofill that draws on Gmail and Google Photos for some users. Both say the changes reach only some users at first, so you may not see them yet. HelenTech adds that on Windows, Chrome can now apply some security updates without a full restart. We covered the autofill idea in an earlier story.

Edge 157 adds Apple sign-in and drops fading tabs. According to Microsoft's release notes, Edge 157 lets you sign in with an Apple account as well as a Microsoft one, upgrades the Copilot new tab page and removes the setting that faded inactive tabs. Windows 11 users on 25H2 or later also get Accelerated App Launch, which Microsoft says makes Edge open faster when it is already running in the background. Some people may need to sign in to Microsoft Edge again after the move to a new sign-in library.

Vivaldi 8.3 rebuilds its ad and tracker blocker. Vivaldi's new blocker has four levels (Off, Light, Strong and Aggressive), per-site settings from the Shield icon and custom blocklists. The 8.3 release also adds expanding the tab bar on hover and a compact grid for pinned tabs, on Windows, macOS and Linux, and the new blocker also comes to Android and iOS.

Safari is testing "Adaptive Dark Mode" for light websites. The WebKit team announced the feature in the Safari 27.3 beta on 3 November. When your system is set to dark, Safari can show light sites in dark colours, leaving alone pages that already support dark mode. Safari offers a preview on a bright site, and you tap "Try" to turn it on. It is beta only for now, and the post doesn't say which platforms get it. Apple Safari users have nothing to do yet.

Chrome stops supporting XSLT on 17 November. XSLT is an old way for websites to turn XML, such as an RSS feed, into a readable page. Chrome for Developers says it stops working in Chrome 158, due on 17 November, except for sites and companies on two temporary workarounds that end in Chrome 176. Edge follows a release later: its notes put XSLT off by default in Edge 159 Stable. Sites that style XML or RSS feeds with XSLT stylesheets will show raw XML instead, so site owners should move the transformation to the server or to JavaScript. Visitors can't fix this themselves. See Google Chrome and Microsoft Edge.