Google has rolled out a vital security update for its Chrome browser, addressing 10 vulnerabilities that affect Windows, Mac, and Linux users. Among the issues resolved is a high-severity memory corruption flaw within Chrome's Document Object Model (DOM), discovered by Xinyang Ge from Anthropic with assistance from Claude AI. This update, announced on October 15, 2026, also tackles one critical, six high-severity, and three medium-severity vulnerabilities.
The most concerning issue, CVE-2026-110922, is a critical use-after-free flaw located in Chrome's Prerender feature, first reported by Ge on October 2. Use-after-free bugs occur when software attempts to access memory that has already been freed, potentially leading to crashes or memory corruption if exploited by attackers. Google has not yet disclosed technical details or confirmed any active exploitation of this flaw.
The update includes several high-severity fixes, notably in Chrome’s JavaScript engine V8, Core, and SVG components, with additional use-after-free flaws and memory corruption issues reported by Ge, Google, and researcher C0rk1. The medium-severity vulnerabilities involve issues like improper input validation in Desktop and memory corruption in Workers, all reported by Google’s own researchers.
Google is deploying Chrome versions 155.0.8059.84/.85 for Windows and Mac and version 155.0.8059.84 for Linux. Users are encouraged to install these updates promptly by checking the About page in Chrome to initiate an update check. The company employs various security tools, including AddressSanitizer and MemorySanitizer, to identify potential bugs during development.
While Google restricts detailed bug information until a majority of users have implemented the fixes, this proactive security measure underscores the importance of maintaining up-to-date browser versions to protect against potential threats.

