Google patches 37 Chrome security flaws

Google has recently addressed 37 security vulnerabilities in its Chrome browser, including seven that are classified as critical. These issues could potentially allow attackers to execute malicious code or cause crashes, depending on the specific flaw.

Edge lacks immediate fixes

Microsoft's Edge browser, which is based on the same Chromium foundation as Chrome, has not yet received these security patches. Fixes for Edge are expected to be deployed separately after Chrome's updates are fully implemented.

New Chrome version begins rollout

Chrome version 155.0.8059.79, which includes the security updates, has begun rolling out this week. The deployment process may take several days or even weeks to complete across all platforms, including Windows and macOS.

Critical flaw in graphics component

One of the critical vulnerabilities, CVE-2026-110152, affects ANGLE, a graphics component used by Chrome. This is a buffer overflow issue, which can lead to data being written outside of the allocated memory space, potentially allowing malicious code execution.

Memory management errors identified

Among the 37 vulnerabilities, 25 are of the "use-after-free" type, where the browser continues to use memory that has already been freed. This could allow attackers to inject their own data into the memory space.

High-severity issues in key components

The 29 high-severity vulnerabilities affect various components, including the V8 JavaScript engine, extensions, and WebRTC. The advisory also highlights an information leak in the password manager and a privilege escalation in the Chrome installer.

Bug bounty awarded to researcher

A $1,000 reward for a high-severity vulnerability has been awarded to Findingz. Xinyang Ge, a researcher who appears in multiple entries, is credited with identifying several critical flaws, including one in the V8 engine.

AI contributes to security improvements

Google notes that technical details about some vulnerabilities may remain restricted until most users are updated. AI tools are increasingly used by companies like Microsoft, Mozilla, and Apple to identify and address security issues.

Other Chromium browsers to benefit

Other browsers based on the Chromium engine, such as Edge, Brave, Opera, and Vivaldi, will also receive the security fixes once they are integrated into the Chromium project.