Update Chrome: Google fixes 37 security flaws, including seven critical bugs
Google patched 37 Chrome flaws, including seven critical bugs that can enable remote code execution.
Google released Chrome updates on October 13-14 that fix 37 security flaws, including seven rated Critical. Desktop Stable reaches 155.0.8059.79/.80 on Windows and Mac and 155.0.8059.79 on Linux; Android also received 155.0.8059.79. CVE-2026-110152 is a buffer overflow in ANGLE on Android that can allow remote code execution outside the sandbox via crafted HTML. Two PDF use-after-free bugs are also detailed: Critical CVE-2026-110136 for unsandboxed RCE and High CVE-2026-110147 for sandboxed code execution. The report does not say any flaw is being exploited.
- Chrome 155.0.8059.79/.80 fixes 37 flaws, seven rated Critical.
- CVE-2026-110152 is an ANGLE buffer overflow on Android enabling unsandboxed RCE.
- Critical PDF use-after-free CVE-2026-110136 also allows code execution outside the sandbox.
- High-severity CVE-2026-110147 is limited to code execution inside the sandbox.
- Desktop and Android updates are rolling out over coming days and weeks.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-110152+2 related CVEs | Heap buffer overflow in Chrome ANGLE on Android | 9.6 group max | <1% | PoC |
From the original article
2 min read at malwarebytes.com
Some flaws could let attackers run malicious code on your device through a crafted webpage.
By @MetallicaMVP · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.