Cybersecurity

Chrome 155 Fixes 7 Critical Flaws: What IT Teams Must Do

Affix Center · · 4 min read

Laptop glowing red in a dark room, suggesting a security warning

In short: On 13 October 2026, Google released Chrome 155.0.8059.79/.80 for Windows and Mac and 155.0.8059.79 for Linux, fixing 37 security flaws, seven rated critical. Google has not said any are being exploited, but browsers are a common entry point. Indian offices should confirm every PC has updated and restarted Chrome.

What Happened

According to the Google Chrome Releases blog post dated 13 October 2026, the Stable channel was updated to version 155.0.8059.79/.80 for Windows and Mac and 155.0.8059.79 for Linux. Google said the update includes 37 security fixes and will roll out over the coming days and weeks.

Security news site GBHackers, reporting on 14 October, counted seven critical, 29 high and one medium severity issue. The critical flaws listed in Google's notes are:

  • CVE-2026-110152: buffer overflow in ANGLE, the graphics layer
  • CVE-2026-110149: use-after-free in the browser
  • CVE-2026-110136: use-after-free in PDF handling
  • CVE-2026-110161: use-after-free in networking
  • CVE-2026-110165: use-after-free in core components
  • CVE-2026-110148: use-after-free in SVG
  • CVE-2026-110151: use-after-free in media

Malwarebytes, writing on 15 October, noted that Android also received version 155.0.8059.79, though it may take time to reach every phone through Google Play. As of these reports, Google had not said that any of the 37 flaws are being exploited in the wild, and it usually holds back technical details until most users have updated.

Who Is Affected

Any organisation that uses Google Chrome on Windows, Mac, Linux or Android is affected until the browser is updated to version 155.0.8059.79 or later. That includes most Indian offices, government departments and schools.

Other browsers built on the same Chromium code, such as Microsoft Edge, often share parts of the code and receive their own fixes from their vendors. Check each vendor's release notes rather than assuming they are covered by the Chrome update.

What It Means for Your Business

The browser is where staff open email links, web portals, PDFs and online forms. Use-after-free and buffer overflow bugs of this kind can, in some cases, let a malicious web page or file run code on a computer. Google has not said that these particular bugs are being used in attacks, so there is no reason to panic. There is, however, a reason to act this week rather than wait.

Chrome has already needed several emergency fixes this year. Security Affairs reported in September 2026 that Google had fixed the seventh actively exploited Chrome zero-day of 2026. Once details of a flaw become public, attackers often try to use it against browsers that were not updated.

The most common gap is simple: Chrome downloads the update but the user never restarts the browser. In many offices, people keep dozens of tabs open for weeks, so the old, vulnerable version keeps running. Shared computers at counters and kiosks are often missed too.

What to Do Now

  1. Check the version on every device: Use your endpoint management or IT asset tool to list the Chrome version on every PC and laptop, and flag anything below 155.0.8059.79.
  2. Force a browser restart: Use Chrome's enterprise policy for relaunch notifications, or ask staff to open Help, then About Google Chrome, and click Relaunch so the update actually applies.
  3. Cover the forgotten machines: Include shared counters, kiosks, meeting room PCs, servers with browsers and remote staff laptops that rarely connect to the office network.
  4. Update other Chromium browsers: Check Microsoft Edge and any other Chromium-based browsers in use, and apply their vendors' latest security updates.
  5. Update mobile devices: Ask staff who use Chrome on Android for work to update it from Google Play.
  6. Record and review: Note the date each group of devices was updated, and add browser updates to your monthly patch cycle so the next release does not depend on users.

If you do not have a clear patch routine yet, our patch management process guide shows how to build one. This month's Microsoft Patch Tuesday updates also need attention, so it makes sense to handle both together.

Frequently Asked Questions

How do I check which Chrome version I have?

Open Chrome, go to the menu, then Help, then About Google Chrome. The page shows the version and starts an update check. Click Relaunch if an update is waiting.

Are any of these Chrome flaws being exploited?

As of the reports from 13 to 15 October 2026, Google had not said that any of the 37 flaws are being exploited in the wild. That can change, so update now rather than later.

Does this affect Microsoft Edge?

Edge is built on Chromium and may share some of the affected code, but Microsoft releases its own updates. Check Microsoft's Edge security release notes and keep Edge updated as well.

How Affix Center Can Help

Affix Center helps organisations in Mumbai and Maharashtra keep their systems patched and secure. Our IT operations team can set up central browser and OS patching with reports you can show auditors, and our cybersecurity team can review the wider risk on your endpoints.

If you are not sure every office PC is on the latest Chrome, contact our team for a quick patch status check.