Multiple Flaws: Chrome 155 Update Patches 37 Security Flaws, 7 of Them Critical

🚨 Update Chrome Now! Google just issued an emergency patch for 37 security vulnerabilities, including 7 critical memory corruption flaws. Protect your browser today!

Google has released a security update for Chrome that fixes 37 vulnerabilities, seven of them rated critical. Version 155.0.8059.79/.80 reached the Stable channel on October 13 for Windows and Mac, with 155.0.8059.79 for Linux and Android. The rollout is staged, so it may take a few days to reach everyone.

The patch arrives only six days after Chrome 155 first shipped with 247 security fixes. It includes seven critical, 29 high and one medium-severity fixes, covering components such as the graphics layer, PDF handling, media processing, networking and extensions.

The critical bugs

All seven critical flaws are memory-safety issues, a category that keeps causing trouble for modern browsers.

The first, CVE-2026-110152, is a buffer overflow in ANGLE, the layer Chrome uses to translate graphics calls. A buffer overflow happens when a program writes data past the memory set aside for it, which can let an attacker alter how the program behaves.

The other six are use-after-free bugs, where software keeps using memory after it has been released. Depending on the flaw, an attacker could crash the browser, corrupt data or run their own code. They affect:

Browser (CVE-2026-110149)
PDF handling (CVE-2026-110136)
Networking (CVE-2026-110161)
Browser core (CVE-2026-110165)
SVG handling (CVE-2026-110148)
Media processing (CVE-2026-110151)

High-severity fixes

The most notable high-severity bug is CVE-2026-110169 in V8, Chrome’s JavaScript and WebAssembly engine. A specially crafted web page could let a remote attacker run arbitrary code inside Chrome’s sandbox.

Other high-severity fixes include an information leak in the password manager (CVE-2026-110146), a privilege escalation in the Chrome installer (CVE-2026-110150), and authorization flaws in ReadingMode, the updater and Mojo.

The sandbox limits what a single bug can do to the underlying system, but attackers sometimes chain several flaws to get past it. There were no reports of active exploitation of these vulnerabilities at the time of publication.

How to update

Chrome normally updates itself, but you can check manually:

Open Chrome and select the three-dot menu in the top-right corner.
Go to Help > About Google Chrome.
Wait for the download, then click Relaunch.

The patches only apply after a relaunch. IT teams should confirm the new build has reached managed devices, since users often leave Chrome open for days.

Source: https://cybersecuritynews.com/multiple-google-chrome-vulnerabilities/amp/