CERT-FR: Multiple Google Chrome vulnerabilities (50+ CVEs) fixed in Chrome 155 and Extended Stable 152 updates

Linha do tempo

1. cert.ssi.gouv.fr ↗ · pub. 13/10/2026 21:00 · coletado 20/10 16:32 primeiro registro

   CERT-FR: Multiple Google Chrome vulnerabilities (50+ CVEs) fixed in Chrome 155 and Extended Stable 152 updates

   ler a análise desta fonte ocultar

   CERT-FR advisory CERTFR-2026-AVI-1308, published on 14 October 2026, reports multiple vulnerabilities in Google Chrome. Google released the corresponding security bulletins on 13 October 2026 for the Stable and Extended Stable desktop channels. The advisory says only that an attacker could cause a security issue "not specified by the vendor". It does not state that any of the flaws are being exploited, and it gives no per-CVE details.

   Technical Details

   • Affected: Chrome Extended Stable before 152.0.7977.167 (Windows and Mac); Chrome 155.x before 155.0.8059.79 (Linux and Windows) and before 155.0.8059.80 (Mac).
   • The advisory lists more than 50 CVEs: CVE-2026-106184, CVE-2026-106200, CVE-2026-106235, CVE-2026-106347, CVE-2026-106358, CVE-2026-106383, CVE-2026-110136 through CVE-2026-110172, CVE-2026-19175, CVE-2026-87474, CVE-2026-87558 and CVE-2026-87581.
   • The advisory gives no vulnerability classes, CVSS scores, IOCs or attribution.

   Remediation

   • Update Chrome to 155.0.8059.79 (Linux, Windows) or 155.0.8059.80 (Mac) on the Stable channel.
   • Update Chrome to 152.0.7977.167 or later (Windows, Mac) on the Extended Stable channel.
   • See the Google Chrome Releases bulletins of 13 October 2026 for the patch details.