Chrome 155 Patches 247 Security Flaws, Including Four Critical Bugs

by Ben Voss
Chrome 155 Patches 247 Security Flaws, Including Four Critical Bugs

Chrome 155 Patches 247 Security Flaws, Including Four Critical Bugs

Google has released Chrome 155 with fixes for 247 security vulnerabilities, including four critical use-after-free flaws in core browser components. The update affects Chrome users on Windows, macOS and Linux.

Google’s release notes and SecurityWeek report no mention of these vulnerabilities being exploited in the wild, but the scale and severity of the release make updating a priority. The four critical vulnerabilities affect Chromecast, Browser, Navigation and Track components. They are tracked as CVE-2026-106382, CVE-2026-106197, CVE-2026-106358 and CVE-2026-106347.

What Chrome 155 fixes

The update includes 53 high-severity fixes and 190 medium- and low-severity fixes in addition to the four critical issues. The most common bug categories include incorrect authorization, missing authorization, use-after-free errors, information leaks and user-interface misrepresentation.

Google’s release notes list Chrome versions 155.0.8059.39 and 155.0.8059.40 for Windows and macOS, and version 155.0.8059.39 for Linux. Google says the stable-channel update will roll out over the coming days and weeks. It also says that details for some bugs may remain restricted until most users have received the fix.

Google’s advisory says Xinyang Ge reported three of the four critical vulnerabilities, with Claude assisting in identifying the Navigation and Track flaws. SecurityWeek reports that Ge used AI to identify two of the security defects. Google has not disclosed all related bug-bounty amounts.

How to update Chrome

  1. Open Chrome on your computer.
  2. Select the three-dot menu in the upper-right corner, then choose Help and About Google Chrome.
  3. Allow Chrome to download and install version 155.0.8059.39 or 155.0.8059.40, depending on your operating system.
  4. Select Relaunch when prompted. If Chrome says it is up to date, check again later because the rollout is staged.

Organizations that manage Chrome through enterprise policies should check their update controls and avoid unnecessarily delaying the rollout. Updating one browser does not update other Chromium-based browsers, such as Microsoft Edge, Brave or Vivaldi; those products must be patched through their own release channels.

For most users, the practical response is simple: install Chrome 155, restart the browser and confirm the version on the About page.

References

  1. Arghire, I. (2026, October 7). Chrome 155 update patches 247 vulnerabilities. SecurityWeek. https://www.securityweek.com/chrome-155-update-patches-247-vulnerabilities/
  2. Google Chrome. (2026, October 6). Stable channel update for desktop. Chrome Releases. https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html