Chrome Patches 37 Vulnerabilities, Including Seven Critical Memory-Safety Flaws

Google released a Chrome desktop security update fixing 37 vulnerabilities: seven critical, 29 high, and one medium. The patched versions are 155.0.8059.79/.80 for Windows and Mac and 155.0.8059.79 for Linux, with rollout occurring over the coming days and weeks. The critical issues include an ANGLE buffer overflow and six use-after-free flaws affecting Browser, PDF, Network, Core, SVG, and Media components. Other fixes address authorization defects, information disclosure, privilege elevation, and additional weaknesses.

A high-severity V8 vulnerability, CVE-2026-110169, could allow a remote attacker to use a crafted HTML page to execute arbitrary code inside Chrome’s sandbox; that capability alone does not establish full operating-system compromise. Google has not reported active exploitation or disclosed a complete attack chain, and some vulnerability details may remain restricted until users or affected dependencies are updated. Organizations should prioritize deploying the patched versions and ensure users relaunch Chrome to activate the fixes.