[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fm4euJHQfImATic553fT7kQr2-YIRcqRE614PxMtNkIY":3},{"article":4,"iocs":44,"watch_terms":58,"solutions":59,"lesson":125},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"19ece595-9a54-47c2-a33f-9a499dd4a935","Chrome 155 Update Patches 247 Vulnerabilities","chrome-155-update-patches-247-vulnerabilities-d086ae","Four critical-severity use-after-free defects were fixed in Chromecast, Browser, Navigation, and Track. The post Chrome 155 Update Patches 247 Vulnerabilities appeared first on SecurityWeek.","Google has released a Chrome 155 security update addressing 247 vulnerabilities, with four critical use-after-free defects impacting Chromecast, Browser, Navigation, and Track components. Researcher Xinyang Ge identified three of these critical flaws, two of which were found using AI. The update also resolves 53 high-severity vulnerabilities, with many also identified by Ge using AI, though Google will not reward the researcher for some of these AI-discovered issues.","Chrome 155 update fixes 247 vulnerabilities, including four critical use-after-free flaws.","https:\u002F\u002Fwww.securityweek.com\u002Fchrome-155-update-patches-247-vulnerabilities\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2023\u002F04\u002FChrome-Zero-Day-exploits.jpg","2026-10-07T10:51:57+00:00","2026-10-07T12:00:28.932548+00:00",8,[17,20,23],{"name":18,"type":19},"Chrome","product",{"name":21,"type":22},"Google","vendor",{"name":24,"type":25},"AI","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":28,"name":29,"slug":30},null,"Vulnerabilities","vulnerabilities",[32,37,39],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":38},{"id":26,"icon":28,"name":29,"slug":30},{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",[45,49,52,55],{"type":46,"value":47,"context":48},"cve","CVE-2026-106382","Critical use-after-free vulnerability in Chromecast component",{"type":46,"value":50,"context":51},"CVE-2026-106197","Critical use-after-free vulnerability in Browser component",{"type":46,"value":53,"context":54},"CVE-2026-106358","Critical use-after-free vulnerability in Navigation component",{"type":46,"value":56,"context":57},"CVE-2026-106347","Critical use-after-free vulnerability in Track component",[21,18],{"controls":60,"vendors":119},[61,90],{"slug":62,"name":63,"problem":64,"products":65},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[66,74,82],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":91,"name":92,"problem":93,"products":94},"patch-management","Automated patch management","Known holes get closed in days, not months.",[95,103,111],{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",[120],{"slug":121,"name":21,"logo_path":122,"roles":123},"google","\u002Fvendor-logos\u002Fgoogle.png",[124],"affected",{"slug":126,"title":127,"body":128,"framework_refs":129,"framework_notes":138},"chrome-155-patches-247-flaws-including-4-critical-use-after-free-bugs","Chrome 155 Patches 247 Flaws — Including 4 Critical Use-After-Free Bugs","Google's Chrome 155 release patched an unusually large number of vulnerabilities — 247 in total — including four critical use-after-free flaws affecting core browser components such as Chromecast, Navigation, and Track. Use-after-free vulnerabilities are particularly dangerous because attackers can exploit them to execute arbitrary code or escalate privileges, often silently. The scale of this release highlights how rapidly browser attack surfaces grow, and how even widely-used, well-resourced software can accumulate critical flaws between update cycles. Organizations that delay browser updates, or lack visibility into which browser versions are deployed across endpoints, remain exposed to exploitation of these known, patched vulnerabilities.",[130,131,132,133,134,135,136,137],"CIS Control 7: Continuous Vulnerability Management","CIS Control 2: Inventory and Control of Software Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","NIST SI-2: Flaw Remediation","NIST CM-8: System Component Inventory","NIST RA-5: Vulnerability Monitoring and Scanning","ITIL Change Management: Emergency Change Procedures","GDPR Article 32: Security of Processing (patching as a technical safeguard)",{}]