Industry Odisha Bureau, Oct 15: India’s cybersecurity agency CERT-In has issued a warning over critical security flaws in Google Chrome. It has urged users to install the latest browser update. Google’s latest security release fixes 37 vulnerabilities that could expose desktop users to malicious attacks.
In an advisory dated October 14, 2026, CERT-In said successful exploitation could allow attackers to run arbitrary code, steal sensitive information, bypass security restrictions, gain higher privileges or disrupt systems through denial-of-service attacks.
The warning covers Chrome versions earlier than 155.0.8059.79 on Linux and earlier than 155.0.8059/79/.80 on Windows and mac OS. Google is notably distributing the fixes through a gradual rollout.
The vulnerabilities affect multiple browser components. These include memory management, graphics processing and JavaScript execution. A critical flaw has been identified as CVE-2026-110152. It affects ANGLE, Chrome’s graphics component. The buffer overflow vulnerability could cause crashes and potentially allow malicious code to execute.
Google has also addressed six critical use-after-free flaws linked to PDF processing, networking, SVG, media and core browser functions. These vulnerabilities arise when software accesses memory that has already been freed.
Additional high-severity issues affecting V8, Passwords, Extensions, WebRTC, and Canvas have also been patched. Another flow, CVE-2026-110169, affects the V8 JavaScript engine. Google credited Anthropic;s Xinyang Ge for reporting it, with assistance from Claude.
Users can check for the update by opening Chrome’s three-dot menu and selecting Help, followed by ‘About Google Chrome’. The browser will check for available updates. A restart may be required to finish installation.
Microsoft Edge users should also remain alert because the browser is built on Chromium. Microsoft said on October 13 that it was preparing an update addressing the latest fixes, but had not announced a release date.
