Last updated: 15 Oct 26 09:37:32 (UTC)
Chrome Stable CVE Report
Source: http://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html Report generated: 2026-10-15 Chrome version: 155.0.8059.79 Total CVEs: 37
Executive Summary
This release contains 37 CVEs across 3 severity levels with a total bounty pool of $1,000.
- Critical: 7
- High: 29
- Medium: 1
- Low: 0
- Bounty-bearing: 1
- External reporters: 12
Vulnerability Type Breakdown
| Type | Count | % of Total |
|---|---|---|
| Use After Free | 25 | 67.6% |
| Other | 11 | 29.7% |
| Type Confusion | 1 | 2.7% |
Component Area Distribution
| Component | Count | % of Total |
|---|---|---|
| XR | 8 | 21.6% |
| Media | 7 | 18.9% |
| 3 | 8.1% | |
| Password Manager | 3 | 8.1% |
| V8 (JavaScript) | 3 | 8.1% |
| SVG | 2 | 5.4% |
| DOM | 2 | 5.4% |
| ANGLE (Graphics) | 1 | 2.7% |
| Browser Core | 1 | 2.7% |
| Networking | 1 | 2.7% |
| Extensions API | 1 | 2.7% |
| WebRTC | 1 | 2.7% |
| Updater/Installer | 1 | 2.7% |
| Mojo (IPC) | 1 | 2.7% |
| Canvas | 1 | 2.7% |
| File System/Input | 1 | 2.7% |
Bounty Analysis
Total bounty pool: $1,000 Bounty-bearing CVEs: 1
| CVE ID | Severity | Description | Bounty |
|---|---|---|---|
| CVE-2026-110162 | High | Use after free in Desktop. | $1000 |
External Researcher Credits
| Researcher | CVEs |
|---|---|
| Andrew Boni | CVE-2026-110142 |
| Aria Akhavan - Haikhavan Security | CVE-2026-110159 |
| Findingz | CVE-2026-110162 |
| Hoyong Jin | CVE-2026-110146 |
| M. Fauzan Wijaya (Gh05t666nero) | CVE-2026-110150 |
| Souma Ohsawa | CVE-2026-110144 |
| Syn4pse (@ret2happy) | CVE-2026-110166 |
| Xinyang Ge | CVE-2026-110136, CVE-2026-110148, CVE-2026-110151, CVE-2026-110158, CVE-2026-110145, CVE-2026-110172, CVE-2026-110164, CVE-2026-110163, CVE-2026-110157, CVE-2026-110147, CVE-2026-110154, CVE-2026-110155, CVE-2026-110167, CVE-2026-110171 |
| Xinyang Ge (Anthropic), assisted by Claude | CVE-2026-110169 |
| Zhenpeng (Leo) Lin at depthfirst | CVE-2026-110152 |
| weihengqiuu | CVE-2026-110139 |
| xinyang | CVE-2026-110153 |
Critical & High Severity Analysis
36 CVEs at Critical or High severity.
By vulnerability type:
- Use After Free: 24
- Other: 11
- Type Confusion: 1
By component:
- XR: 8
- Media: 7
- PDF: 3
- Password Manager: 3
- V8 (JavaScript): 3
- SVG: 2
- DOM: 2
- ANGLE (Graphics): 1
- Browser Core: 1
- Networking: 1
Reporting Timeline
| Date | CVEs Reported |
|---|---|
| 2026-03-25 | 1 |
| 2026-07-29 | 1 |
| 2026-08-25 | 1 |
| 2026-08-27 | 1 |
| 2026-08-29 | 1 |
| 2026-09-14 | 2 |
| 2026-09-15 | 3 |
| 2026-09-16 | 2 |
| 2026-09-21 | 1 |
| 2026-09-23 | 1 |
| 2026-09-24 | 1 |
| 2026-09-26 | 1 |
| 2026-09-28 | 1 |
| 2026-09-30 | 2 |
| 2026-10-01 | 2 |
| 2026-10-02 | 8 |
| 2026-10-05 | 5 |
| 2026-10-06 | 3 |
Critical CVEs
| CVE ID | Description | Reporter | Reported | Bounty | Issue |
|---|---|---|---|---|---|
| CVE-2026-110152 | Buffer overflow in ANGLE. | Zhenpeng (Leo) Lin at depthfirst | 2026-09-30 | — | 567736859 |
| CVE-2026-110149 | Use after free in Browser. | 2026-10-01 | — | 568437149 | |
| CVE-2026-110136 | Use after free in PDF. | Xinyang Ge | 2026-10-02 | — | 568719364 |
| CVE-2026-110161 | Use after free in Network. | 2026-10-02 | — | 568826881 | |
| CVE-2026-110165 | Use after free in Core. | 2026-10-02 | — | 568827293 | |
| CVE-2026-110148 | Use after free in SVG. | Xinyang Ge | 2026-10-05 | — | 570050934 |
| CVE-2026-110151 | Use after free in Media. | Xinyang Ge | 2026-10-06 | — | 570638834 |
Full CVE Table
| CVE ID | Severity | Description | Reporter | Reported | Bounty | Issue |
|---|---|---|---|---|---|---|
| CVE-2026-110136 | Critical | Use after free in PDF. | Xinyang Ge | 2026-10-02 | — | 568719364 |
| CVE-2026-110148 | Critical | Use after free in SVG. | Xinyang Ge | 2026-10-05 | — | 570050934 |
| CVE-2026-110149 | Critical | Use after free in Browser. | 2026-10-01 | — | 568437149 | |
| CVE-2026-110151 | Critical | Use after free in Media. | Xinyang Ge | 2026-10-06 | — | 570638834 |
| CVE-2026-110152 | Critical | Buffer overflow in ANGLE. | Zhenpeng (Leo) Lin at depthfirst | 2026-09-30 | — | 567736859 |
| CVE-2026-110161 | Critical | Use after free in Network. | 2026-10-02 | — | 568826881 | |
| CVE-2026-110165 | Critical | Use after free in Core. | 2026-10-02 | — | 568827293 | |
| CVE-2026-110137 | High | Use after free in WebRTC. | 2026-09-15 | — | 561997899 | |
| CVE-2026-110138 | High | Use after free in ShapeDetection. | 2026-10-02 | — | 568899705 | |
| CVE-2026-110139 | High | Use after free in Media. | weihengqiuu | 2026-09-30 | — | 568037533 |
| CVE-2026-110140 | High | Type confusion in V8. | 2026-09-15 | — | 562038980 | |
| CVE-2026-110141 | High | Observable discrepancy in Media. | 2026-10-02 | — | 568895734 | |
| CVE-2026-110143 | High | Use of uninitialized variable in ThirdParty lmza_sdk. | 2026-08-29 | — | 554531101 | |
| CVE-2026-110144 | High | Incorrect authorization in Mojo. | Souma Ohsawa | 2026-09-23 | — | 565252396 |
| CVE-2026-110145 | High | Use after free in Passwords. | Xinyang Ge | 2026-09-16 | — | 562243925 |
| CVE-2026-110146 | High | Information leak in Passwords. | Hoyong Jin | 2026-09-14 | — | 561039723 |
| CVE-2026-110147 | High | Use after free in PDF. | Xinyang Ge | 2026-10-05 | — | 570050928 |
| CVE-2026-110150 | High | Privilege elevation in Installer. | M. Fauzan Wijaya (Gh05t666nero) | 2026-09-14 | — | 561334760 |
| CVE-2026-110153 | High | Use after free in Media. | xinyang | 2026-09-24 | — | 565742182 |
| CVE-2026-110154 | High | Use after free in Canvas. | Xinyang Ge | 2026-10-05 | — | 570167920 |
| CVE-2026-110155 | High | Buffer overflow in PDFium. | Xinyang Ge | 2026-10-05 | — | 570167922 |
| CVE-2026-110156 | High | Incorrect reference resolution in Extensions. | 2026-09-15 | — | 561892119 | |
| CVE-2026-110157 | High | Use after free in SVG. | Xinyang Ge | 2026-10-05 | — | 570047270 |
| CVE-2026-110158 | High | Use after free in Passwords. | Xinyang Ge | 2026-09-16 | — | 562242421 |
| CVE-2026-110159 | High | Incorrect authorization in Updater. | Aria Akhavan - Haikhavan Security | 2026-09-21 | — | 564573066 |
| CVE-2026-110160 | High | Missing authorization in ReadingMode. | 2026-08-25 | — | 552510359 | |
| CVE-2026-110162 | High | Use after free in Desktop. | Findingz | 2026-07-29 | $1000 | 540499008 |
| CVE-2026-110163 | High | Use after free in DOM. | Xinyang Ge | 2026-10-02 | — | 568831102 |
| CVE-2026-110164 | High | Use after free in DOM. | Xinyang Ge | 2026-10-02 | — | 568730794 |
| CVE-2026-110166 | High | Buffer overflow in Animation. | Syn4pse (@ret2happy) | 2026-09-26 | — | 566496747 |
| CVE-2026-110167 | High | Use after free in Media. | Xinyang Ge | 2026-10-06 | — | 570461696 |
| CVE-2026-110168 | High | Use after free in V8. | 2026-10-01 | — | 568010382 | |
| CVE-2026-110169 | High | Use after free in V8. | Xinyang Ge (Anthropic), assisted by Claude | 2026-09-28 | — | 567088929 |
| CVE-2026-110170 | High | Use after free in Bindings. | 2026-03-25 | — | 496308073 | |
| CVE-2026-110171 | High | Use after free in Media. | Xinyang Ge | 2026-10-06 | — | 570675082 |
| CVE-2026-110172 | High | Use after free in Media. | Xinyang Ge | 2026-10-02 | — | 568719352 |
| CVE-2026-110142 | Medium | Use after free in FileSystem. | Andrew Boni | 2026-08-27 | — | 553525515 |
Methodology Notes
- Structured CVE data extracted via
unjam --cve. - Vulnerability types and component areas classified from CVE description text.
- Bounty amounts from the
bountyfield in unjam output. - External researchers identified from the
reporterfield (non-Google, non-anonymous).