Chrome 155 Security Update Fixes 37 Flaws, Including Seven Critical Bugs

TL;DR

Google released Chrome 155.0.8059.79/.80 on October 13, 2026, with fixes for 37 security flaws. This Chrome security update includes seven critical bugs, led by a buffer overflow in the ANGLE graphics layer. Google has not reported any of these bugs as exploited.

Notable CVEs

Why It Matters

Chrome is the world’s most used browser, so its bugs reach a huge audience. Browser memory flaws are a common first step in attack chains. A single malicious web page can be enough to trigger them.

How the Attacks Work

Memory bugs dominate this release. In fact, 25 of the 37 flaws are use after free bugs, where the browser reuses memory it already released. Attackers can abuse such bugs to corrupt memory and run code.

Critical fixes

• CVE-2026-110152: buffer overflow in ANGLE
• CVE-2026-110149, CVE-2026-110136, CVE-2026-110161 and CVE-2026-110165: use after free in Browser, PDF, Network and Core
• CVE-2026-110148 and CVE-2026-110151: use after free in SVG and Media

Notable high-severity fixes

The update also fixes type confusion and use after free bugs in the V8 JavaScript engine. Other high-severity flaws hit the Installer, Updater, Mojo and Passwords components.

Who found them

Researcher Xinyang Ge reported 16 of the bugs. One V8 flaw credits Xinyang Ge of Anthropic, assisted by Claude. Google’s internal teams found 12 more.

So far, Google has disclosed just one bounty: $1,000 for a use after free bug in the Desktop component. Rewards for several other reports remain marked as to be decided. Meanwhile, Google may keep bug details restricted until most users have this Chrome security update.

Exploitation status

Google has not flagged any of these flaws as exploited in the wild. No public proof-of-concept has been confirmed either.

Affected Versions

Chrome versions before 155.0.8059.79 on Windows, Mac and Linux are affected.

Patch and Mitigation Steps

• Update to Chrome 155.0.8059.79/.80 on Windows and Mac, or 155.0.8059.79 on Linux.
• Go to Settings, then About Chrome, and restart the browser to finish.
• Admins should push this Chrome security update through managed policies.

Google lists every fix in its Chrome Stable Channel update notes. The rollout continues over the coming days and weeks.

×

Support Our Threat Intelligence

Find our vulnerability reports and weekly recaps helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee

PayPal

Select your plan

Free Pro Team

Hover over a plan to see its benefits.

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.