Google rushes out Chrome 155 patch after seven critical flaws emerge

Google is rolling out Chrome 155 after fixing 37 security vulnerabilities, including a critical ANGLE buffer overflow and six use-after-free bugs that could enable code execution.

Google has pushed out Chrome 155.0.8059.79 and .80 for Windows and macOS, with .79 for Linux, after uncovering 37 security flaws in the browser. Seven of the defects are rated critical, making this one of the more serious maintenance releases in the current Chrome cycle. The update is being distributed gradually, so not every device will receive it at the same time.

The most severe issue is a critical buffer overflow in ANGLE, Chrome’s graphics translation layer. Google has also fixed six use-after-free bugs spread across Browser, PDF, Network, Core, SVG and Media. These memory-safety errors are especially concerning because they can trigger crashes, corruption of memory, and in some cases code execution if they are successfully exploited.

The wider patch set includes 29 high-severity vulnerabilities and one medium-severity flaw. Among them is CVE-2026-110169, which affects V8, Chrome’s JavaScript and WebAssembly engine. The report for that flaw describes possible code execution within Chrome’s sandbox, rather than a sandbox escape, which makes the distinction important for assessing the real-world risk.

Security researchers were involved in uncovering at least part of the issue set. SQ Magazine reported that at least 15 of the vulnerabilities were submitted by Xinyang Ge. Google has not reported active exploitation of the flaws, but the volume and severity of the bugs make the update important for users and administrators alike.

Desktop users can install the patch through Chrome’s menu by opening Help, then About Google Chrome, and relaunching once the download completes. Linux users can also obtain the update through their package manager. Because the rollout is phased, some installations may not yet show the new version, so checking manually is sensible.