Google has issued a security update for its Chrome browser, addressing ten vulnerabilities across Windows, Mac, and Linux platforms. This update includes a high-severity memory corruption flaw identified by Xinyang Ge of Anthropic with assistance from Claude AI, highlighting Google’s commitment to maintaining browser security.
Details of the Chrome Update
The update, announced on October 15, 2026, resolves one critical, six high-severity, and three medium-severity vulnerabilities. It introduces Chrome versions 155.0.8059.84/.85 for Windows and Mac, and version 155.0.8059.84 for Linux. Users are advised to install the update as soon as it becomes available to ensure their browsers are secure.
The critical vulnerability, CVE-2026-110922, involves a use-after-free flaw within Chrome’s Prerender feature. Discovered by Xinyang Ge, this type of flaw can potentially lead to memory corruption or crashes if exploited. As a precaution, Google has withheld detailed technical information until the majority of users have applied the update.
Significant Vulnerabilities Addressed
Among the high-severity issues is CVE-2026-110913, a memory corruption flaw in Chrome’s Document Object Model (DOM). Reported by Ge and assisted by Claude AI, this vulnerability emphasizes the increasing role of artificial intelligence in cybersecurity research.
The update also repairs several high-severity issues affecting Chrome’s JavaScript engine, V8, as well as Core and SVG components. These include additional use-after-free flaws like CVE-2026-110919 and CVE-2026-110921, along with memory corruption vulnerabilities CVE-2026-110918, CVE-2026-110917, and CVE-2026-110920.
Medium-Severity and Broader Impact
The addressed medium-severity vulnerabilities involve improper input validation in Desktop, a use-after-free issue in Compositing, and memory corruption in Workers. Google’s own researchers reported these flaws, underscoring the company’s internal efforts to enhance browser security.
Google’s strategy involves gradually rolling out updates, encouraging users to check Chrome’s About page for prompt updates and restart the browser if necessary. This staggered release helps manage the deployment of critical security patches across diverse user bases.
As part of its ongoing security measures, Google utilizes advanced tools like AddressSanitizer and MemorySanitizer to detect potential bugs during development. This Chrome update follows recent reports of significant Chrome vulnerabilities, reinforcing the importance of staying vigilant against emerging threats.
Users and organizations are encouraged to integrate threat intelligence feeds with data from numerous Security Operations Centers (SOCs) to bolster defenses against new malware threats. Ensuring that devices are up-to-date with the latest security patches is essential for maintaining robust cybersecurity.
