India’s cybersecurity agency CERT-In has warned Google Chrome users about critical security vulnerabilities that could expose their devices and sensitive information to cyberattacks. Google has released an update addressing 37 security flaws.
What Has CERT-In Warned Chrome Users About?
The Indian Computer Emergency Response Team (CERT-In) issued a vulnerability advisory on October 14, 2026, warning individuals and organisations about multiple security weaknesses in Google Chrome for desktop computers.
According to the advisory, attackers could exploit these vulnerabilities to execute arbitrary code, access sensitive information or cause denial-of-service conditions on affected systems.
The warning covers Chrome versions earlier than 155.0.8059.79 on Linux and 155.0.8059.79/.80 on Windows and macOS.
Google has released security fixes and is gradually distributing the updated browser versions to users.
FCRF Launches CP-FRM to Build India’s Next Generation of Fraud Risk Professionals
What Security Flaws Has Google Fixed?
Google’s latest Chrome update addresses 37 vulnerabilities, including several critical flaws affecting important browser components.
One of the critical vulnerabilities, identified as CVE-2026-110152, affects ANGLE, a graphics component used by Chrome.
The flaw could cause a buffer overflow, allowing data to be written beyond the memory allocated for an operation. Such a weakness could result in browser crashes or potentially enable malicious code execution.
Google has also addressed six other critical use-after-free vulnerabilities affecting PDF handling, networking, SVG, media and core browser functions.
A use-after-free vulnerability occurs when software attempts to access memory that has already been released. Attackers may exploit such weaknesses to interfere with browser operations or execute malicious code.
Which Other Chrome Components Are Affected?
The update also fixes several high-severity vulnerabilities involving Chrome’s V8 JavaScript engine, Passwords, Extensions, WebRTC, DOM, PDFium and Canvas components.
Another vulnerability, CVE-2026-110169, affects the V8 JavaScript engine.
Google credited Xinyang Ge of Anthropic for reporting the high-severity use-after-free vulnerability, with assistance from Claude.
The range of affected components highlights how security weaknesses can emerge across different browser functions, from processing website content to handling documents and network communications.
How Can Users Update Google Chrome?
CERT-In has advised individuals and organisations running affected Chrome versions to install the latest security updates.
Users can check their browser version by opening Google Chrome, selecting the three-dot menu and navigating to Help > About Google Chrome.
Chrome will automatically check for available updates and download them when available. Users may need to relaunch the browser to complete installation.
Google is rolling out the update gradually, meaning it may not immediately appear on every device. Users should check again if the latest version is not yet available.
Are Microsoft Edge Users Also Affected?
Microsoft Edge users may also be affected by some of the broader Chromium vulnerabilities because Edge is built on the Chromium browser platform. However, Microsoft had not released the corresponding stable-channel security update at the time of the report.
In an advisory dated October 13, Microsoft acknowledged the latest Chromium security fixes and said it was working on an update.
The company had not confirmed when the patch would become available. Edge users should therefore check for browser updates as Microsoft makes the relevant fixes available.
Why Is Installing Browser Updates Important?
Web browsers regularly process information from websites, documents, extensions and other online services. Vulnerabilities in these components can create opportunities for attackers to compromise affected systems.
CERT-In’s advisory highlights the risks of continuing to use browser versions containing known security flaws.
Installing the latest security updates helps address these weaknesses and reduces exposure to attacks targeting vulnerable browser components.
The420 Cybersecurity Insight: “An Outdated Browser Can Become a Security Risk”
The CERT-In warning reinforces the importance of keeping browsers updated. The vulnerabilities affect several core Chrome components, and some could potentially allow malicious code execution. Users and organisations should verify their installed browser versions and apply security fixes promptly rather than waiting for problems to appear.
About the author — Ayesha Aayat writes on cybercrime, digital safety, and emerging online threats. Her work focuses on public awareness, legal clarity, and technology-driven risks.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
