Chrome Stable and Extended Stable Updates Fix Critical Flaws

P1 — VALIDATE AND UPDATEMedium to Critical · Not provided by the authorityEXPLOITATION: NOT STATED

Quick Answer

Google released Chrome Stable 155.0.8059.79/.80 and Extended Stable 152.0.7977.167 with dozens of security fixes, including Critical vulnerabilities. Confirm every managed desktop channel reaches the matching build, restart browsers, validate policy and extensions, and retain rollout evidence.

Confirm Scope And Apply The Supported Remediation

What to do now: Inventory managed and unmanaged Chrome desktop installations by platform and channel, force or monitor the supported update, restart the browser to load the new build, confirm the resulting version, and validate enterprise policy, extensions, authentication, and key web workflows.

Open the authoritative advisory

Last verified: 2026-10-15 UTC. Recheck the authoritative advisory and supported distribution channel before changing production.

Scope And Authority

Product scopeGoogle Chrome Stable on Windows, macOS, and Linux and Extended Stable on Windows and macOS
AdvisoryChrome Stable 155.0.8059.79/.80 / Chrome Extended Stable 152.0.7977.167
CVEsCVE-2026-106184, CVE-2026-106200, CVE-2026-106235, CVE-2026-106347, CVE-2026-106358, CVE-2026-106383, CVE-2026-110136, CVE-2026-110137, CVE-2026-110138, CVE-2026-110139, CVE-2026-110140, CVE-2026-110141, CVE-2026-110142, CVE-2026-110143, CVE-2026-110144, CVE-2026-110145, CVE-2026-110146, CVE-2026-110147, CVE-2026-110148, CVE-2026-110149, CVE-2026-110150, CVE-2026-110151, CVE-2026-110152, CVE-2026-110153, CVE-2026-110154, CVE-2026-110155, CVE-2026-110156, CVE-2026-110157, CVE-2026-110158, CVE-2026-110159, CVE-2026-110160, CVE-2026-110161, CVE-2026-110162, CVE-2026-110163, CVE-2026-110164, CVE-2026-110165, CVE-2026-110166, CVE-2026-110167, CVE-2026-110168, CVE-2026-110169, CVE-2026-110170, CVE-2026-110171, CVE-2026-110172, CVE-2026-19175, CVE-2026-87474, CVE-2026-87558, CVE-2026-87581
Authoritative release date2026-10-13 20:40:37 UTC
Authority revision date2026-10-13 20:53:43 UTC
Affected versionsChrome builds before Stable 155.0.8059.79/.80 or Extended Stable 152.0.7977.167 on the corresponding desktop platforms.
Fixed versionChrome Stable 155.0.8059.79/.80 on Windows and macOS, 155.0.8059.79 on Linux, or Extended Stable 152.0.7977.167 on Windows and macOS
CVSS base scoreNot provided by the authority
CVSS severityMedium to Critical
Exploitation statusNot stated by the authority; no exploitation claim is inferred.

What Changed

Google released 37 Stable-channel security fixes and 28 Extended Stable fixes, including multiple Critical memory-safety vulnerabilities; some issue details remain restricted during rollout.

What To Validate Now

  1. Inventory. Locate Google Chrome Stable on Windows, macOS, and Linux and Extended Stable on Windows and macOS deployments, versions, enabled features, exposure paths, owners, and dependent services.
  2. Establish applicability. Compare each deployment with the authority's affected-version statement: Chrome builds before Stable 155.0.8059.79/.80 or Extended Stable 152.0.7977.167 on the corresponding desktop platforms. Do not infer applicability from product family or severity alone.
  3. Remediate. Apply Chrome Stable 155.0.8059.79/.80 on Windows and macOS, 155.0.8059.79 on Linux, or Extended Stable 152.0.7977.167 on Windows and macOS through the supported vendor or project channel, following the current advisory and change-control requirements.
  4. Validate. Confirm the resulting version or managed-service state, exercise representative functionality and recovery paths, monitor for regressions, and document exceptions.
  5. Retain evidence. Preserve asset and owner identifiers, the applicability decision, before-and-after versions, change approval, installation output, validation results, and any exception or rollback record.

Operational Cautions

Stable and Extended Stable have different target builds and overlapping vulnerability sets. Do not treat beta or early-stable announcements as substitutes, and recheck restricted issue details after Google opens them. Preserve the authority snapshot, asset and owner records, before-and-after versions, change approval, installation output, validation results, exceptions, and rollback evidence.

Evidence To Retain

  • Exact product, release stream, package or application version, enabled feature, environment, and accountable owner.
  • UTC timestamps, authority revision, approved change record, installer or package-manager output, and resulting version.
  • Relevant logs and monitoring evidence, test results, exceptions, compensating controls, and rollback decisions.

Related TechGeeks Resources

Authoritative References

Correction policy: If the authority changes affected versions, fixed versions, severity, exploitation information, mitigations, or required action, TechGeeks will update this notice and its verification date.