Google Fixes 37 Security Flaws in Chrome, Including Seven Critical Bugs
Summary
Google’s Chrome 155 update fixes 37 security flaws, including seven rated Critical. The article details three vulnerabilities that could enable remote code execution and explains how to install the update.
Key points
- The desktop update brings Chrome to 155.0.8059.79/.80 on Windows and Mac and 155.0.8059.79 on Linux; the Android release is also version 155.0.8059.79.
- Google says the update fixes 37 security flaws, seven rated Critical. Rollouts may take days or weeks.
- CVE-2026-110152 is an Android ANGLE buffer overflow that could allow remote code execution outside the sandbox via a crafted HTML page.
- CVE-2026-110136 is a Critical use-after-free flaw in Chrome’s PDF component that could allow remote code execution outside the sandbox.
- CVE-2026-110147 is a High-severity PDF-component use-after-free flaw that could allow code execution inside the sandbox.
- Users can check for and apply an available update from Chrome’s About Google Chrome settings or Help menu.
Article Details
- Vulnerability Types
- Buffer overflow
- Use-after-free
- Severity
- CVE-2026-110136 is rated Critical; CVE-2026-110147 is rated High. The article also reports seven Critical fixes among 37 security fixes.
- Exploitation Status
- unknown
- Exploit Availability
- unknown
- Patch Status
- available
MITRE ATT&CK
CVE
CVE-2026-110136Then I spotted two use-after-free vulnerabilities in the PDF component. CVE-2026-110136, rated Critical, could allow a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.CVE-2026-110147could allow a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. CVE-2026-110147, rated High, could allow an attacker to execute arbitrary code inside the sandbox via a crafted HTMLCVE-2026-110152The first is tracked as CVE-2026-110152, a buffer overflow in ANGLE in Google Chrome on Android. It could allow a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.