Chrome 155.0.8059.79/.80 (13 Oct): 37 security fixes including seven critical memory bugs (ANGLE buffer overflow CVE-2026-110152, use-after-free in PDF, Network, Core, SVG, Media, Browser); no exploitation noted
Google moved Chrome's desktop Stable channel to 155.0.8059.79/.80 for Windows and Mac and 155.0.8059.79 for Linux on 13 October 2026 (US time), rolling out over the coming days and weeks. The release carries 37 security fixes: seven rated critical, 29 high and one medium. The critical ones are a buffer overflow in the ANGLE graphics layer (CVE-2026-110152, reported by Zhenpeng (Leo) Lin of depthfirst) and use-after-free bugs in Browser (CVE-2026-110149), PDF (CVE-2026-110136), Network (CVE-2026-110161), Core (CVE-2026-110165), SVG (CVE-2026-110148) and Media (CVE-2026-110151). High-rated fixes include a V8 type confusion (CVE-2026-110140), V8 use-after-free bugs (CVE-2026-110168 and CVE-2026-110169, the second reported by Xinyang Ge of Anthropic with help from Claude), a privilege elevation in the installer (CVE-2026-110150), incorrect authorisation in the updater and Mojo, and several Passwords bugs including an information leak (CVE-2026-110146). Many of the bugs were reported by Xinyang Ge. Google's post does not say any of them are being exploited. The Extended Stable channel moved to 152.0.7977.167 for Windows and Mac the same day with 28 of the fixes, including the PDF, Network and SVG critical bugs. Chromium-based browsers such as Microsoft Edge, Brave and Opera take these fixes in their own releases. Primary: Chrome Releases blog.
- Product
- Google Chrome desktop (Windows, Mac, Linux); Extended Stable 152
- Versions
- Fixed: Chrome 155.0.8059.79/.80 (Windows, Mac) and 155.0.8059.79 (Linux); Extended Stable 152.0.7977.167 (Windows, Mac). Earlier builds are affected.
- Exploited in Australia?
- unknown
- Patch to
- Update Chrome to 155.0.8059.79 or later and relaunch the browser (Extended Stable: 152.0.7977.167). Managed fleets: check that the update has actually applied and that users have restarted, and watch for matching Edge, Brave and Opera releases.
Primary: Chrome Releases — Stable Channel Update for Desktop, 155.0.8059.79/.80 (13 Oct 2026) · Vendor: Google Chrome Releases — 37 security fixes in 155.0.8059.79 · CVE: CVE-2026-110152, CVE-2026-110149, CVE-2026-110136, CVE-2026-110161, CVE-2026-110165, CVE-2026-110148, CVE-2026-110151, CVE-2026-110140, CVE-2026-110168, CVE-2026-110169, CVE-2026-110150, CVE-2026-110146