Google patches 37 Chrome flaws, including seven rated critical
Google’s Chrome update for Windows, Mac and Linux fixes 37 vulnerabilities: seven rated critical, 29 high severity and one medium. The critical flaws include a buffer overflow in Chrome’s graphics layer and six use-after-free bugs; Google has not reported active exploitation, and the update is rolling out gradually.
Bottom line — Chrome 155.0.8059.79/.80 for Windows and Mac, and 155.0.8059.79 for Linux, contain the fixes.
Go deeper 6
-
Google’s release notes say the update began rolling out on 13 October and may take days or weeks to reach all devices.
-
The ANGLE buffer overflow, CVE-2026-110152, was reported by Zhenpeng “Leo” Lin at depthfirst, according to Google’s acknowledgements.
-
The six critical use-after-free flaws affect Chrome’s Browser, PDF, Network, Core, SVG and Media components, according to Google’s release notes.
-
A high-severity V8 flaw, CVE-2026-110169, could allow code execution inside Chrome’s sandbox through a crafted page, according to the vulnerability report cited by Cyber Security News.
-
Cyber Security News notes that code execution inside Chrome’s sandbox does not itself establish access to the wider operating system.
-
Google is restricting some technical details until more users have installed the fixes, according to the release coverage.