Google Chrome 155 Fixes 37 Security Vulnerabilities, Including 7 Critical Ones

In addition to quadrupling Chrome bug bounty, Google has released another major security update for its browser, which fixes dozens of vulnerabilities. The update, released yesterday, addresses 37 security vulnerabilities, including seven critical vulnerabilities that involve memory corruption and use-after-free bugs.

Google Chrome 155 fixes seven critical security flaws

Google is rolling out Chrome 155.0.8059.79/.80 for Windows and Mac, alongside version 155.0.8059.79 for Linux. The update is rolling out gradually over the coming days and weeks. One of the most notable vulnerabilities is CVE-2026-110152, a critical buffer overflow affecting ANGLE, Chrome’s graphics translation layer. Google credits Zhenpeng “Leo” Lin at depthfirst with reporting the issue on September 30.

The other six critical vulnerabilities involve use-after-free bugs. These affect Chrome’s Browser, PDF, Network, Core, SVG, and Media components. A use-after-free vulnerability occurs when software accesses memory after it has been released. Depending on the circumstances, attackers could exploit such flaws to crash applications, corrupt memory, or potentially execute malicious code.

However, Google has not confirmed that these vulnerabilities are being actively exploited. Its announcement also does not establish a complete attack chain for the newly patched flaws.

Chrome update also fixes high-severity vulnerabilities

Beyond the critical bugs, Google’s latest release includes 29 high-severity vulnerabilities and one medium-severity flaw. The high-severity fixes cover several browser components, including V8, Media, PDFium, DOM, SVG, and Canvas.

One notable entry is CVE-2026-110169, which affects V8, Chrome’s JavaScript and WebAssembly engine. The supplied vulnerability report describes potential code execution inside Chrome’s sandbox through a crafted HTML page. That does not automatically mean an attacker can escape the sandbox or take over the entire device.

Other fixes address buffer overflows, information leaks, authorization problems, and privilege elevation. Google is withholding some technical details until more users receive the fixes.

How to install the latest Chrome update

Open Chrome’s three-dot menu and select Help > About Google Chrome. The browser will check for available updates and download the latest version. Select Relaunch to finish installing it. Linux users can update Chrome through their package manager. Since the release is rolling out gradually, it might not appear on every device immediately.

You can check Google’s official Chrome release notes for the full security announcement.