Reported by 3 outlets
Chrome 155 Update Patches 247 Vulnerabilities
Why this score
- Breadth
- 1.50 / 2.0 · 3 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 1.00 / 5.0 · CVSS + content signals
- Velocity
- 0.50 / 2.0 · updates in 48h
- Pickup speed
- 0.59 / 0.6 · time to second source
- Recency
- × 0.92 temporal multiplier
- Community
- + 0.40 / 1.5 · reddit signal
- Score
- 5.3 / 10 = base × recency + community
Desk analysis
Chrome 155.0.8059.39 for Linux and 154.0.8037.39/.40 for Windows and Mac patches 247 vulnerabilities, with four critical use-after-free bugs tracked as CVE-2026-106382, CVE-2026-106197, CVE-2026-106358, and CVE-2026-106347 affecting the Chromecast, Browser, Navigation, and Track components. All four critical flaws are use-after-free; one was found by Google and the other three were reported by researcher Xinyang Ge, who used AI to discover two of them. The release also resolves 53 high-severity issues, 34 of which came from external researchers, plus 190 medium- and low-severity defects, bringing the total external contribution to 62 of the 247 bugs.
The exposure is broad: Chrome runs on the majority of desktop endpoints, and the 247 fixes include 41 incorrect authorization and 34 missing authorization issues that suggest attackers could manipulate component privileges without full exploitation. Only about $33,000 has been paid in bounties, with amounts undisclosed for nearly 50 reports, which signals Google is still processing the disclosure pipeline rather than confirming low-impact findings. This story matters more than a routine patch Tuesday because the critical bugs span core browser surfaces - Navigation and Browser components are in the direct attack path for drive-by and malicious-site exploitation - and the AI-assisted discovery pattern indicates faster discovery timelines that defenders must match with faster patch cycles.
Defenders should upgrade to Chrome 155.0.8059.39 on Linux, 155.0.8059.39 on Android, or 154.0.8037.40 on Windows and Mac immediately; if automatic updates lag, open About Google Chrome and trigger Relaunch manually. For hunt telemetry, inspect process memory for use-after-free crashes in the Browser and Track components, review chrome://crashes reports for signatures tied to the four CVE IDs, and check proxy logs for unusual Chromecast navigation traffic that could indicate pre-auth probing. There is no mentioned workaround beyond updating, so blocking unpatched Chrome versions at the network edge via user-agent filtering is the only containment option until rollout completes.
Watch for Google to disclose the remaining bounty amounts and for any in-the-wild exploitation of the four critical use-after-free bugs, since the advisory does not yet confirm active exploitation but does confirm AI-accelerated discovery by external researchers. A second signal to monitor is whether Chrome 155 reaches full stable rollout quickly, because the Android build is initially released to only a small percentage of users and delayed Play Store availability extends the exposure window.
Timeline
-
original reporting
Chrome 155 Update Patches 247 Vulnerabilities
securityweek.com · 6d ago · October 7th, 2026
Google on Tuesday rolled out a Chrome 155 security update that addresses 247 vulnerabilities, including four critical-severity flaws. All four critical bugs are use-after-free issues. They impact Chrome’s Chromecast, Browser, Navigation, and Track components and are tracked as CVE-2026-106382, CVE-2026-106197, CVE-2026-106358, and CVE-2026-106347. The first was discovered by Google, while the other three were reported by Xinyang Ge, who used AI to identify two of the security defects. Google has yet to disclose the bug bounties handed out to the researcher. The fresh Chrome update resolves 53 high-severity vulnerabilities, including 34 reported by external researchers, Google notes in its advisory . Approximately a dozen of these flaws were reported by Xinyang Ge. Many were found using AI, and Google will not reward the researcher for some of them. The remaining 190 security defects are medium- and low-severity issues, most of which were discovered by Google. External security researchers reported a total of 62 of the bugs patched in this Chrome update. Google paid roughly $33,000 in bug bounty rewards, but has yet to disclose the amounts handed out for almost 50 of the reports. The most common types of vulnerabilities resolved include incorrect authorization (41), use-after-free (34), missing authorization (34), UI misrepresentation (20), information leak (17), uninitialized resource (16), confused deputy (9), and improper input val
-
update from malware.news
Chrome and ChromeOS to fix critical security issues
malware.news · 6d ago · October 7th, 2026
Google has released updates for the Chrome browser and the ChromeOS operating system. On October 6, Google released a Stable Channel Update for Desktop . This is the most important one for desktop users. It brings Chrome to version 155.0.8059.39 for Linux and versions 154.0.8037.39/.40 for Windows and Mac . On the same day, Google released version 155.0.8059.39 for Android , to a small percentage of users. It may not be available on Google Play for everyone yet but keep an eye out for it. Google says it includes stability and performance improvements. How to update Chrome The easiest option is to allow Chrome to update automatically. But you can end up lagging behind on updates if you never close your browser or if something goes wrong, such as an extension preventing the update. If you don’t want to wait for the rollout to reach you, manually updating is easy. Open About Google Chrome from Chrome’s settings or Help menu. If one is available, click Relaunch to apply it. Version 155.0.8059.40 is up to date You can find an explanation of the version numbering system and step-by-step instructions in our guide: How to update Chrome on every operating system . How to update ChromeOS You can update your Chromebook’s operating system by following these steps: Connect to the internet. Your Chromebook automatically checks for updates and downloads when it connects. At the bottom right,
-
mentioned by securityonline.info
The Chrome security update to version 155 fixes 37 flaws, including seven critical bugs and 25 use after free issues. Update Chrome now. # C
securityonline.info · 3h ago · October 14th, 2026