Chrome 155 Update Fixes 10 Security Flaws, Including Critical Prerender Bug

TL;DR

Google released Chrome 155.0.8059.84/.85 on October 15, 2026, with fixes for 10 vulnerabilities. This Chrome security update patches one critical use after free bug in Prerender and six high-severity flaws. Google reports no exploitation in the wild.

Notable CVEs

Why It Matters

Memory bugs in a browser can let a malicious web page run code or crash the tab. Notably, three of the seven critical and high bugs sit in V8, Chrome’s JavaScript engine. One researcher, Xinyang Ge, reported five of them. Ge credited one finding, CVE-2026-110913, to work “assisted by Claude.”

How the Attacks Work

Critical: use after free in Prerender

CVE-2026-110922 is a use after free flaw in Prerender, which loads pages before a user clicks. In general, an attacker would lure a victim to a crafted page to trigger such bugs.

High-severity flaws

• CVE-2026-110919 and CVE-2026-110921: use after free in V8
• CVE-2026-110920: memory corruption in V8
• CVE-2026-110913, CVE-2026-110918 and CVE-2026-110917: memory corruption in DOM, Core and SVG

Medium-severity flaws

The rest cover input validation in Desktop, use after free in Compositing and memory corruption in Workers.

Exploitation status

Google has not flagged any flaw as exploited, and none appear in CISA’s KEV catalog. Meanwhile, Google keeps bug details private until most users update.

Affected Versions

Chrome desktop builds before 155.0.8059.84 on Windows, Mac and Linux are affected. Other Chromium-based browsers, such as Edge, Brave and Opera, share much of this code. Their users should watch for a matching Chrome security update from each vendor.

Patch and Mitigation Steps

• Update to 155.0.8059.84/.85 on Windows and Mac, or 155.0.8059.84 on Linux.
• Open Settings, then About Chrome, and relaunch the browser.

The Chrome stable channel update will roll out over days or weeks. So, apply this Chrome security update manually instead of waiting.

×

Support Our Threat Intelligence

Find our vulnerability reports and weekly recaps helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee

PayPal

Select your plan

Free Pro Team

Hover over a plan to see its benefits.

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.