Technology and Cybersecurity News

Google has released major security updates for its Chrome browser, addressing vulnerabilities that could potentially expose millions of users to cybersecurity threats. The fixes cover multiple browser components, including systems responsible for processing web pages, executing JavaScript and handling graphics.

The updates highlight the importance of keeping web browsers current, particularly as attackers may exploit software vulnerabilities to compromise devices, access sensitive information or disrupt normal operations.

Google's October 15 desktop update addressed 10 security vulnerabilities, including one classified as critical and six rated high severity. The company subsequently announced Chrome 156 for Windows, macOS and Linux on October 20, introducing further security fixes and improvements.

For users, the immediate priority is to check for the latest available Chrome update rather than relying on an older security release.

Google's October 15 stable-channel update introduced fixes for 10 security vulnerabilities across desktop versions of Chrome.

The vulnerabilities affected several browser components, including Prerender, V8, the Document Object Model (DOM), Core, SVG, Compositing and Workers.

One of the most serious issues was a critical use-after-free vulnerability in Chrome's Prerender feature, identified as CVE-2026-110922.

A use-after-free vulnerability occurs when software attempts to access memory after that memory has been released. Depending on the circumstances, this can cause application crashes, memory corruption or other security problems.

The update also addressed high-severity memory corruption flaws in browser components responsible for handling website content and executing JavaScript.

Google has not publicly confirmed that the specific vulnerabilities in this October 15 release were being actively exploited. Nevertheless, security updates are important because they close weaknesses that could otherwise be targeted by attackers.

The October 15 update included security fixes across multiple components rather than addressing a single isolated problem.

Key issues included:

V8 is Chrome's JavaScript engine, which allows websites and web applications to run interactive code. The DOM represents the structure of a webpage, while SVG supports scalable vector graphics.

Security flaws in these components can be significant because browsers routinely process content from websites, including pages that may be malicious or compromised.

Google has restricted some technical details while the fixes are distributed. This is a standard security practice intended to reduce the risk of attackers exploiting information before users have updated.

Google announced Chrome 156 for desktop computers on October 20, 2026.

The stable release was listed as version 156.0.8078.47 for Linux and 156.0.8078.47/.48 for Windows and macOS. Google said the rollout would take place gradually over the following days and weeks.

The release includes numerous security fixes, including vulnerabilities classified as critical and high severity. Because updates are distributed progressively, not every user will receive the same version at precisely the same time.

This distinction matters: the October 15 update and the subsequent Chrome 156 release are separate updates. Users should install the newest version offered to their device rather than assume that the earlier patch is still the latest.

Google Chrome generally downloads updates automatically when they become available. However, users who keep their browsers open for extended periods may need to relaunch Chrome to complete installation.

Updating Chrome is straightforward and does not usually require advanced technical knowledge.

Follow these steps:

Chrome will display the installed browser version on the About page.

If the latest version has not reached your device yet, check again later. Managed workplace computers may receive updates according to an organisation's IT policies.

Android users should check for updates through the Google Play Store.

If the Update option is unavailable, the installed version may already be current for that device, or the latest release may not yet have reached the account or region.

Users should avoid downloading browser installers or APK files from unfamiliar websites.

An outdated browser may leave a device vulnerable to security weaknesses that have already been corrected in newer releases.

Depending on the vulnerability, successful exploitation could potentially lead to browser crashes, memory corruption, unauthorised code execution or the bypassing of security protections.

In some circumstances, attackers may attempt to exploit a flaw by persuading a user to visit a specially crafted webpage. The actual risk depends on the vulnerability, the browser version and the protections enabled on the device.

Keeping Chrome updated reduces exposure to known vulnerabilities, but it does not eliminate every cybersecurity risk.

Users should also maintain operating-system updates, exercise caution with suspicious links and downloads, and review browser extensions regularly.

Organisations should treat browser security updates as part of their regular cybersecurity maintenance.

IT administrators should verify the Chrome versions installed across managed computers, confirm that security patches have been deployed and investigate devices that remain on vulnerable versions.

Businesses using centrally managed browsers may need to follow their established update and testing procedures. However, security testing should not result in unnecessary delays when critical fixes are available.

Organisations should also ensure that employees understand the risks associated with suspicious websites, unexpected downloads and untrusted browser extensions.

Google's latest Chrome security releases reinforce the importance of regular browser maintenance. The October 15 update fixed 10 vulnerabilities, including a critical flaw in Prerender, while the subsequent Chrome 156 release introduced additional security fixes.

Users should open Chrome's About page, check the version available for their device and install the latest update offered. Restarting the browser when prompted ensures that the update can take effect.

Although no software update can guarantee complete protection against cyberattacks, installing security patches promptly is one of the simplest and most effective ways to reduce exposure to known browser vulnerabilities.

The key takeaway: Check your Google Chrome version today, install the latest available security update and keep automatic browser updates enabled.