Chrome 155 Update Patches 247 Vulnerabilities
PatchChromeOur summary
Google has shipped Chrome 155, a security update closing 247 vulnerabilities, among them four critical use-after-free bugs affecting the Chromecast, Browser, Navigation, and Track components (CVE-2026-106382, CVE-2026-106197, CVE-2026-106358, and CVE-2026-106347). One of these was found internally by Google, while researcher Xinyang Ge reported the other three, partly with the help of AI-assisted bug hunting. The release also addresses 53 high-severity issues and 190 lower-risk medium/low findings, with Google paying out around $33,000 in bounty rewards for externally reported bugs, though many payouts remain undisclosed. No evidence of active exploitation has been reported for any of the fixed flaws, but the volume and severity mix make prompt updating to version 155.0.8059.39/.40 (Windows/macOS) or 155.0.8059.39 (Linux) advisable.
SecurityWeek publishes this story on its own site; we link to it rather than reprint it.
Worried this affects your company?
Discuss a security assessment of your internet-facing systems. Scope agreed before testing.