# Multiple Google Chrome Flaws Could Enable Memory Corruption and Code Execution Attacks (37 vulnerabilities patched, 7 critical; fixed in Chrome 155.0.8059.79)

> Google patched 37 Chrome vulnerabilities (7 critical, 29 high, 1 medium), mostly memory-corruption flaws (use-after-free, buffer overflow) across ANGLE, Browser, PDF, Network, Core, SVG, Media, V8 and other components. Chrome versions before 155.0.8059.79 are affected; no in-the-wild exploitation is confirmed and the CVEs checked are not in CISA KEV.

- **Published:** 2026-10-14T08:15:17Z
- **Last reviewed:** 2026-10-15T14:35:52.319Z
- **Canonical:** https://intel.threadlinqs.com/threat/TL-2026-3483
- **ID:** TL-2026-3483
- **Severity:** CRITICAL (CVSS 9.6)
- **Category:** VULNERABILITY
- **Status:** PATCHED
- **Detections:** 9 · **IOCs:** 6 (full data via the Threadlinqs MCP server — Purple tier)
- **CVEs:** CVE-2026-110152, CVE-2026-110149, CVE-2026-110136, CVE-2026-110161, CVE-2026-110165, CVE-2026-110148, CVE-2026-110151, CVE-2026-110169, CVE-2026-110166, CVE-2026-110155, CVE-2026-110146, CVE-2026-110150, CVE-2026-110142, CVE-2026-110140, CVE-2026-110168, CVE-2026-110147

## Description

On 2026-10-13 Google released a Chrome Stable channel update to 155.0.8059.79/.80 (Windows/Mac) and 155.0.8059.79 (Linux) that fixes 37 security vulnerabilities: 7 rated Critical, 29 High and 1 Medium, as reported by Cyber Security News on 2026-10-14.

The seven Critical flaws are CVE-2026-110152 (ANGLE, buffer overflow, credited to Zhenpeng 'Leo' Lin of depthfirst), and use-after-free bugs in Browser (CVE-2026-110149), PDF (CVE-2026-110136), Network (CVE-2026-110161), Core (CVE-2026-110165), SVG (CVE-2026-110148) and Media (CVE-2026-110151), each credited to Google / Xinyang Ge. NVD describes CVE-2026-110152 as a heap-based buffer overflow (CWE-122) in ANGLE in Chrome on Android prior to 155.0.8059.79 that could allow a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Notable High-severity issues include CVE-2026-110169 (V8 use-after-free, reported by Xinyang Ge of Anthropic, assisted by Claude; a crafted HTML page could allow a remote attacker to execute arbitrary code inside Chrome's sandbox), CVE-2026-110166 (Animation, buffer overflow) and CVE-2026-110155 (PDFium, buffer overflow). Only 9 of the 37 CVE IDs were retrievable from the sources; the remaining high-severity CVEs were not extracted.

No CVSS scores were published at the time of research, no public PoC and no in-the-wild exploitation were reported, and CVE-2026-110169 is not listed in CISA KEV. No network or file IOCs exist for this vulnerability batch, so BeaconBeagle correlation was not applicable. Defenders should update Chrome and Chromium-based browsers to 155.0.8059.79 or later.

## MITRE ATT&CK

- T1203 Exploitation for Client Execution
- T1204.001 User Execution: Malicious Link
- T1189 Drive-by Compromise
- T1204.002 User Execution
- T1068 Exploitation for Privilege Escalation
- T1211 Exploitation for Defense Evasion

## Sources

- [Multiple Google Chrome Flaws Could Enable Memory Corruption and Code Execution Attacks](https://cybersecuritynews.com/multiple-google-chrome-vulnerabilities/)
- [Chrome Releases: Stable Channel Update for Desktop](https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html)
- [Chrome Releases Blog - October 2026 archive](https://chromereleases.googleblog.com/2026/10/)
- [NVD - CVE-2026-110152](https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-110152)
- [Rapid7 - Google Chrome CVE-2026-110169](https://www.rapid7.com/db/vulnerabilities/google-chrome-cve-2026-110169/)
- [Malwarebytes - Update Chrome and ChromeOS to fix critical security issues](https://www.malwarebytes.com/blog/bugs/2026/10/update-chrome-and-chromeos-to-fix-critical-security-issues)
- [CISA Known Exploited Vulnerabilities Catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)

## Full data

Detection queries (Splunk SPL / Microsoft KQL / Sigma) and IOC values require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/threat/TL-2026-3483