In a vulnerability advisory issued on October 14, 2026, CERT-In highlighted multiple security weaknesses affecting Google Chrome on desktop computers. The agency warned that attackers could exploit these vulnerabilities to execute arbitrary code, access sensitive information or trigger denial-of-service conditions on affected systems.
The warning applies to Chrome versions earlier than 155.0.8059.79 on Linux and versions earlier than 155.0.8059.79/.80 on Windows and macOS. Google has released security fixes and is gradually rolling out the updated browser versions to users.
Google Fixes 37 Chrome Security Vulnerabilities
Google’s latest Chrome update addresses 37 security vulnerabilities, including several critical flaws affecting important browser components. One of the critical vulnerabilities, identified as CVE-2026-110152, affects ANGLE, a graphics component used by Chrome.
The vulnerability could cause a buffer overflow, allowing data to be written beyond the memory allocated for an operation. Depending on how the flaw is exploited, this weakness could cause browser crashes or potentially enable malicious code execution.
Google has also fixed six other critical use-after-free vulnerabilities affecting PDF handling, networking, SVG, media and core browser functions.
A use-after-free vulnerability occurs when software attempts to access memory that has already been released. Attackers may exploit such weaknesses to interfere with browser operations or execute malicious code, potentially compromising affected systems.
V8, Passwords and Other Chrome Components Also Affected
The security update addresses several high-severity vulnerabilities involving Chrome’s V8 JavaScript engine, Passwords, Extensions, WebRTC, DOM, PDFium and Canvas components.
Another vulnerability, identified as CVE-2026-110169, affects the V8 JavaScript engine. Google credited Xinyang Ge of Anthropic for reporting the high-severity use-after-free vulnerability, with assistance from Claude.
The affected components span several browser functions, including processing website content, handling documents, managing extensions and supporting network communications. The range of vulnerabilities highlights the potential security risks associated with weaknesses in different parts of a browser.
How to Update Google Chrome and Install Security Fixes
CERT-In has advised individuals and organisations using affected Chrome versions to install the latest security updates.
Users can check their installed browser version by opening Google Chrome, selecting the three-dot menu and navigating to Help > About Google Chrome. The browser will automatically check for available updates and download them when available. Users may need to relaunch Chrome to complete the installation.
Since Google is distributing the update gradually, the latest version may not appear immediately on every device. Users who cannot access the update should check again later to confirm whether it has become available.
Are Microsoft Edge Users Also at Risk?
Microsoft Edge users may also be affected by some of the broader Chromium vulnerabilities because Edge is built on the Chromium browser platform. However, Microsoft had not released the corresponding stable-channel security update at the time of the report.
In an advisory dated October 13, Microsoft acknowledged the latest Chromium security fixes and said it was working on an update. The company had not confirmed when the patch would become available.
Edge users should therefore check for browser updates as Microsoft makes the relevant security fixes available. Until the corresponding update is released, users should remain aware of the potential exposure associated with the affected Chromium vulnerabilities.
Why Installing Browser Security Updates Matters
Web browsers regularly process information from websites, documents, extensions and other online services. Security vulnerabilities in these components can create opportunities for attackers to compromise affected systems.
CERT-In’s advisory highlights the risks of continuing to use browser versions containing known security flaws. Installing the latest security updates helps address these weaknesses and reduces exposure to attacks targeting vulnerable browser components.
The warning reinforces the importance of verifying browser versions and applying security patches promptly. With Google addressing 37 vulnerabilities in its latest Chrome update and Microsoft working on corresponding fixes for Edge, users and organisations should ensure their browsers receive the relevant updates as they become available.
About The Author
Comment List