CVE-2026-106358: Use-after-free in Google Chrome Navigation allows sandbox escape

Update Chrome and ChromeOS to fix critical security issues

Google patched Chrome and ChromeOS, including critical sandbox-escape use-after-free bugs.

On October 6, Google released stable Chrome updates: version 155.0.8059.39 for Linux and 154.0.8037.39/.40 for Windows and Mac, with Android 155.0.8059.39 rolling out gradually. The desktop release includes 247 security fixes, four rated critical. CVE-2026-106197 and CVE-2026-106358 are critical use-after-free flaws in Browser and Navigation that could let a remote attacker run code outside the sandbox via crafted HTML. CVE-2026-106240 is a high-severity type confusion in V8 that could execute code inside the sandbox. The report does not say any flaw is being exploited.

Malwarebytes LabsOct 7, 10:25 UTC · 1d agoVulnerability CVE-2026-106197 CVE-2026-106240 CVE-2026-1063582· 1 read

Google Chrome Update Fixes Massive 247 Vulnerabilities, Including 4 Code Execution Flaws

Google patched 247 Chrome flaws, including four critical use-after-free bugs, in version 155.0.8059.39.

On October 6, 2026, Google shipped Chrome 155.0.8059.39/.40 for Windows and Mac and 155.0.8059.39 for Linux, fixing 247 vulnerabilities. Four critical issues are use-after-free bugs: CVE-2026-106382 in Chromecast, CVE-2026-106197 in Browser, CVE-2026-106358 in Navigation, and CVE-2026-106347 in Track. Google does not describe exploit methods, confirm arbitrary code execution, or say the flaws are exploited in the wild. High-severity fixes include CVE-2026-102322 (incorrect authorization in Site Isolation) and CVE-2026-106239 (integer overflow in WebGL), plus issues in ANGLE, V8, WebRTC, and other components.

Cyber Security NewsOct 7, 08:13 UTC · 1d agoVulnerability CVE-2026-106382 CVE-2026-106197 CVE-2026-106358+3 CVEs

Chrome 155 Update Patches 247 Vulnerabilities

Google's Chrome 155 update patches 247 vulnerabilities, including four critical use-after-free flaws; no exploitation in the wild was reported.

Google's Chrome 155 security update resolves 247 vulnerabilities, including four critical use-after-free flaws tracked as CVE-2026-106382, CVE-2026-106197, CVE-2026-106358, and CVE-2026-106347 affecting the Chromecast, Browser, Navigation, and Track components. Researcher Xinyang Ge reported three of the critical bugs and roughly a dozen of the 53 high-severity flaws, many found using AI. External researchers reported 62 bugs total, earning about $33,000 in bounties. Google mentions no in-the-wild exploitation; the update rolls out as version 155.0.8059.39/.40 for Windows and macOS.

SecurityWeekOct 7, 10:51 UTC · 1d agoVulnerability CVE-2026-106382 CVE-2026-106197 CVE-2026-106358+1 CVEs1

CVE-2026-106358

In the news3 stories

Update Chrome and ChromeOS to fix critical security issues

Google Chrome Update Fixes Massive 247 Vulnerabilities, Including 4 Code Execution Flaws

Chrome 155 Update Patches 247 Vulnerabilities