Google fixes 52 Chrome flaws, including four critical bugs

Original title: Google Fixes 52 Chrome Security Flaws, Including Four Critical Vulnerabilities

Cyber Security Newsby AbinayaOct 28, 2026 · 13:46 UTC (2d ago)3 min read2

AI summary · x-ai/grok-4.7Summaries by Vani AI

Stable builds move to 156.0.8078.73/.74 on Windows and Mac and 156.0.8078.73 on Linux, with no exploitation stated.

Google's Chrome Stable update fixes 52 vulnerabilities: four critical, 46 high, and two medium. The critical bugs are memory corruption in FileSystem, improper input validation in FileAPI and Skia, and a use-after-free in Layout. The notice does not describe attack methods, confirm remote code execution, or say the flaws were exploited. Some bug details stay restricted until most users install the fixes.

Unconfirmed: The notice does not confirm remote code execution or real-world exploitation.

Key facts

Xinyang Ge of Anthropic reported all four critical bugs, with Claude's assistance.
High-severity fixes span V8, ANGLE, WebRTC, PDFium, WebAudio, Payments, and media components.
Two medium bugs affect Paint and Animation.
Google credits researchers from Mozilla, Anthropic, Ada Logics, and OpenAI Codex Security.

Security assessment · AI, from the article

Impact: Browser memory and input-validation flaws; exploit outcome not stated

Product	Affected	Fixed in
Google Chrome	—	156.0.8078.73/.74 (Windows and Mac); 156.0.8078.73 (Linux)

What to do

1.Update Chrome to 156.0.8078.73/.74 on Windows and Mac, or 156.0.8078.73 on Linux.
2.On Linux, install the update through the distribution package manager.
3.Keep automatic updates enabled on managed Windows devices.

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Tags: chrome chromium google memory-corruption use-after-free browser

Vendors: Google
Products: Chrome
Organizations: Anthropic Mozilla Ada Logics
AI models: Claude

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-118305 +29 related CVEs CVE-2026-118306 CVE-2026-118321 CVE-2026-118340 CVE-2026-118355 CVE-2026-118333 CVE-2026-118337 CVE-2026-118307 CVE-2026-118317 CVE-2026-118320 CVE-2026-118327 CVE-2026-118328 CVE-2026-118329+17 more	Memory corruption in Chrome Turbolev before 156.0.8078.73	9.6 group max	—		2d ago

From the original article

3 min read at cybersecuritynews.com

Google released a Chrome security update that fixes 52 vulnerabilities, including four critical flaws affecting FileSystem, FileAPI, Skia, and Layout. According to the release notice, the Stable channel is moving to version 156. 0.

Cyber Security News

By Abinaya · cybersecuritynews.com

Read the full article at Cyber Security News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.