GOOGLE released Chrome 155.0.8059.79/80 on 13 October 2026, delivering fixes for 37 security flaws and addressing a cluster of memory corruption issues, including seven rated as critical. The leading fix is a buffer overflow in the ANGLE graphics layer (CVE-2026-110152). The other high‑severity fixes centre on use‑after‑free conditions across the Browser, PDF, Network and Core components, with additional use‑after‑free issues in SVG and Media. The article notes that none of the flaws has been reported as exploited to date.
Affected versions run prior to 155.0.8059.79 on Windows, macOS and Linux. Chrome users should update to 155.0.8059.79/.80 on Windows and macOS, or 155.0.8059.79 on Linux, then restart the browser. Administrators are advised to push the update through managed policies.
Notable CVEs called out include CVE-2026-110152 (buffer overflow in ANGLE); CVE-2026-110149, CVE-2026-110136, CVE-2026-110161, and CVE-2026-110165 (use after free in Browser, PDF, Network and Core); and CVE-2026-110148 and CVE-2026-110151 (use after free in SVG and Media). The article attributes discovery to researcher Xinyang Ge and Google’s internal teams, with one bounty publicly noted. While no exploitation signals have been observed in the wild, the guidance remains to apply the update promptly to mitigate potential risk.