Chrome 155 Update Patches 247 Vulnerabilities
Chrome 155 update fixes 247 vulnerabilities, including four critical use-after-free flaws.
Google has released a Chrome 155 security update addressing 247 vulnerabilities, with four critical use-after-free defects impacting Chromecast, Browser, Navigation, and Track components. Researcher Xinyang Ge identified three of these critical flaws, two of which were found using AI. The update also resolves 53 high-severity vulnerabilities, with many also identified by Ge using AI, though Google will not reward the researcher for some of these AI-discovered issues.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Google?
Get an email when a new story names Google, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonGoogle's Chrome 155 release patched an unusually large number of vulnerabilities — 247 in total — including four critical use-after-free flaws affecting core browser components such as Chromecast, Navigation, and Track. Use-after-free vulnerabilities are particularly dangerous because attackers can exploit them to execute arbitrary code or escalate privileges, often silently. The scale of this release highlights how rapidly browser attack surfaces grow, and how even widely-used, well-resourced software can accumulate critical flaws between update cycles. Organizations that delay browser updates, or lack visibility into which browser versions are deployed across endpoints, remain exposed to exploitation of these known, patched vulnerabilities.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-106382
- cve — CVE-2026-106197
- cve — CVE-2026-106358
- cve — CVE-2026-106347