securityonline.info 16 Oct 2026, 04:18 UTC

Google fixes critical Chrome Prerender flaw in 10 vulnerability patch

Google fixes critical Chrome Prerender flaw in 10 vulnerability patch
CyberSIXT Evidence Panel

GOOGLE has released Chrome 155.0.8059.84/85 on 15 October 2026, delivering fixes for ten security vulnerabilities, including a critical use-after-free flaw in Prerender and seven high‑severity flaws. Google reports that there has been no confirmed exploitation in the wild. The update affects Chrome desktop builds prior to 155.0.8059.84 on Windows, macOS and Linux; users of other Chromium-based browsers may also be affected due to shared code.

The vulnerability set includes one critical issue and several high‑severity bugs, with the highest CVSSv3 score of 8.8. The critical flaw is CVE-2026-110922, a use-after-free in Prerender. Among the high‑severity flaws are use-after-free and memory corruption issues in V8 (CVE-2026-110913, CVE-2026-110919, CVE-2026-110921, CVE-2026-110915), and memory corruption in DOM, Core and SVG components (CVE-2026-110913, CVE-2026-110918, CVE-2026-110917).

Additional medium‑severity issues involve input validation in Desktop, use-after-free in Compositing, and memory corruption in Workers (other CVEs listed in the rounded tally). The report notes that none of the flaws are flagged as exploited, and Google has kept detailed bug data private until most users have updated.

Patch and mitigations are straightforward: update to 155.0.8059.84/85 on Windows and macOS, or 155.0.8059.84 on Linux, via Settings > About Chrome and relaunch. The Chrome stable channel will roll out over days to weeks, but users are advised to apply the update manually if possible.

View full article

Article by CyberSIXT