# Google Chrome 155 Security Update Fixes 10 Vulnerabilities Including Critical Prerender Use-After-Free (CVE-2026-110922)

> Google released Chrome 155.0.8059.84/.85 (Windows/Mac) and 155.0.8059.84 (Linux) on 2026-10-15, fixing 10 vulnerabilities: 1 Critical (Prerender use-after-free), 6 High (DOM, three in V8, Core, SVG) and 3 Medium. Google has not stated that any issue is exploited in the wild.

- **Published:** 2026-10-17T12:24:18Z
- **Last reviewed:** 2026-10-17T12:24:18Z
- **Canonical:** https://intel.threadlinqs.com/threat/TL-2026-3801
- **ID:** TL-2026-3801
- **Severity:** CRITICAL (CVSS 8.8)
- **Category:** VULNERABILITY
- **Status:** PATCHED
- **Detections:** 9 · **IOCs:** 5 (full data via the Threadlinqs MCP server — Purple tier)
- **CVEs:** CVE-2026-110922, CVE-2026-110913, CVE-2026-110919, CVE-2026-110918, CVE-2026-110917, CVE-2026-110921, CVE-2026-110920, CVE-2026-110916, CVE-2026-110915, CVE-2026-110914

## Description

The Chrome stable-channel update to 155.0.8059.84/.85 (Windows/Mac) and 155.0.8059.84 (Linux) addresses 10 security issues. The single Critical-rated flaw, CVE-2026-110922, is a use-after-free in the Prerender component reported by Xinyang Ge of Anthropic on 2026-10-02. NVD describes it as allowing a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page; user interaction (visiting a malicious page) is required. NVD lists it as CWE-416 with a CVSS 3.1 base score of 8.8 and affected versions earlier than 155.0.8059.84, while Chromium rates it Critical. NVD references Chromium issue 568719351.

Six High-severity issues are fixed: CVE-2026-110913 (DOM, memory corruption, reported 2026-09-29 by Xinyang Ge with Claude AI assistance, which Google credited publicly), CVE-2026-110919 and CVE-2026-110921 (V8 use-after-free), CVE-2026-110920 (V8 memory corruption), CVE-2026-110918 (Core memory corruption, found by Google) and CVE-2026-110917 (SVG memory corruption, reported by C0rk1). Three Medium issues are CVE-2026-110916 (Desktop, improper input validation), CVE-2026-110915 (Compositing use-after-free) and CVE-2026-110914 (Workers memory corruption), all credited to Google.

The release follows the initial Chrome 155 stable release of 2026-10-07 (155.0.8059.39/.40), which patched 247 vulnerabilities including four Critical use-after-free flaws, many reported by Xinyang Ge with AI assistance. Per secondary reporting, the vendor made no mention of in-the-wild exploitation, bounty amounts for the Claude-assisted reports were not paid, and technical details are restricted until most users update. No PoC, exploit code, threat actor, malware or network IOCs are associated with these CVEs in the reviewed sources. Several details (Chromium release-note text for 155.0.8059.84, per-CVE NVD CVSS for the other nine CVEs) could not be verified directly from the primary Chrome Releases post.

Defender relevance: memory-corruption bugs in the renderer-facing components (V8, DOM, SVG, Prerender) are a common first stage of browser exploit chains, typically paired with a separate sandbox escape. Because Chrome auto-updates gradually over days to weeks, endpoints can stay exposed after release. Priority is fleet-wide version enforcement rather than IOC blocking.

## MITRE ATT&CK

- T1566 Phishing
- T1203 Exploitation for Client Execution
- T1204 User Execution

## Sources

- [Google Fixes 10 Chrome Vulnerabilities, Including Memory Corruption Flaw Found With Claude AI](https://cybersecuritynews.com/google-fixes-10-chrome-vulnerabilities/)
- [NVD - CVE-2026-110922](https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-110922)
- [Chrome Releases - October 2026 (Stable Channel Update for Desktop)](https://chromereleases.googleblog.com/2026/10/)
- [Chrome 155 Update Patches 247 Vulnerabilities (SecurityWeek)](https://www.securityweek.com/chrome-155-update-patches-247-vulnerabilities/)
- [Chrome 155 update: 247 security fixes, OpenAI and Anthropic contributions (PiunikaWeb)](https://piunikaweb.com/2026/10/07/chrome-155-update-247-security-fixes-openai-anthropic/)
- [Google Chrome 155: 247 security flaws fixed (IT-Connect)](https://www.it-connect.fr/google-chrome-155-247-failles-securite-corrigees/)

## Full data

Detection queries (Splunk SPL / Microsoft KQL / Sigma) and IOC values require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/threat/TL-2026-3801