The Stable channel has been updated to 155.0.8059.79/.80 for Windows and Mac and 155.0.8059.79 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed. This update includes 37 security fixes. Please see the Chrome Security Page for more information. [TBD][ 567736859 ] Critical CVE-2026-110152: Buffer overflow in ANGLE. Reported by Zhenpeng (Leo) Lin at depthfirst on 2026-09-30 [N/A][ 568437149 ] Critical CVE-2026-110149: Use after free in Browser. Reported by Google on 2026-10-01 [N/A][ 568719364 ] Critical CVE-2026-110136: Use after free in PDF. Reported by Xinyang Ge on 2026-10-02 [N/A][ 568826881 ] Critical CVE-2026-110161: Use after free in Network. Reported by Google on 2026-10-02 [N/A][ 568827293 ] Critical CVE-2026-110165: Use after free in Core. Reported by Google on 2026-10-02 [N/A][ 570050934 ] Critical CVE-2026-110148: Use after free in SVG. Reported by Xinyang Ge on 2026-10-05 [N/A][ 570638834 ] Critical CVE-2026-110151: Use after free in Media. Reported by Xinyang Ge on 2026-10-06 [$1,000][ 540499008 ] High CVE-2026-110162: Use after free in Desktop. Reported by Findingz on 2026-07-29 [N/A][ 496308073 ] High CVE-2026-110170: Use after free in Bindings. Reported by Google on 2026-03-25 [N/A][ 552510359 ] High CVE-2026-110160: Missing authorization in ReadingMode. Reported by Google on 2026-08-25 [N/A][ 554531101 ] High CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk. Reported by Google on 2026-08-29 [TBD][ 561039723 ] High CVE-2026-110146: Information leak in Passwords. Reported by Hoyong Jin on 2026-09-14 [TBD][ 561334760 ] High CVE-2026-110150: Privilege elevation in Installer. Reported by M. Fauzan Wijaya (Gh05t666nero) on 2026-09-14 [N/A][ 561892119 ] High CVE-2026-110156: Incorrect reference resolution in Extensions. Reported by Google on 2026-09-15 [N/A][ 561997899 ] High CVE-2026-110137: Use after free in WebRTC. Reported by Google on 2026-09-15 [N/A][ 562038980 ] High CVE-2026-110140: Type confusion in V8. Reported by Google on 2026-09-15 [N/A][ 562242421 ] High CVE-2026-110158: Use after free in Passwords. Reported by Xinyang Ge on 2026-09-16 [N/A][ 562243925 ] High CVE-2026-110145: Use after free in Passwords. Reported by Xinyang Ge on 2026-09-16 [TBD][ 564573066 ] High CVE-2026-110159: Incorrect authorization in Updater. Reported by Aria Akhavan - Haikhavan Security on 2026-09-21 [TBD][ 565252396 ] High CVE-2026-110144: Incorrect authorization in Mojo. Reported by Souma Ohsawa on 2026-09-23 [N/A][ 565742182 ] High CVE-2026-110153: Use after free in Media. Reported by xinyang on 2026-09-24 [TBD][ 566496747 ] High CVE-2026-110166: Buffer overflow in Animation. Reported by Syn4pse (@ret2happy) on 2026-09-26 [N/A][ 567088929 ] High CVE-2026-110169: Use after free in V8. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-28 [N/A][ 568010382 ] High CVE-2026-110168: Use after free in V8. Reported by Google on 2026-10-01 [TBD][ 568037533 ] High CVE-2026-110139: Use after free in Media. Reported by weihengqiuu on 2026-09-30 [N/A][ 568719352 ] High CVE-2026-110172: Use after free in Media. Reported by Xinyang Ge on 2026-10-02 [N/A][ 568730794 ] High CVE-2026-110164: Use after free in DOM. Reported by Xinyang Ge on 2026-10-02 [N/A][ 568831102 ] High CVE-2026-110163: Use after free in DOM. Reported by Xinyang Ge on 2026-10-02 [N/A][ 568895734 ] High CVE-2026-110141: Observable discrepancy in Media. Reported by Google on 2026-10-02 [N/A][ 568899705 ] High CVE-2026-110138: Use after free in ShapeDetection. Reported by Google on 2026-10-02 [N/A][ 570047270 ] High CVE-2026-110157: Use after free in SVG. Reported by Xinyang Ge on 2026-10-05 [N/A][ 570050928 ] High CVE-2026-110147: Use after free in PDF. Reported by Xinyang Ge on 2026-10-05 [N/A][ 570167920 ] High CVE-2026-110154: Use after free in Canvas. Reported by Xinyang Ge on 2026-10-05 [N/A][ 570167922 ] High CVE-2026-110155: Buffer overflow in PDFium. Reported by Xinyang Ge on 2026-10-05 [N/A][ 570461696 ] High CVE-2026-110167: Use after free in Media. Reported by Xinyang Ge on 2026-10-06 [N/A][ 570675082 ] High CVE-2026-110171: Use after free in Media. Reported by Xinyang Ge on 2026-10-06 [TBD][ 553525515 ] Medium CVE-2026-110142: Use after free in FileSystem. Reported by Andrew Boni on 2026-08-27 We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel. Many of our security bugs are detected using AddressSanitizer , MemorySanitizer , UndefinedBehaviorSanitizer , Control Flow Integrity , libFuzzer , or AFL . Interested in switching release channels? Find out how here . If you find a new issue, please let us know by filing a bug . The community help forum is also a great place to reach out for help or learn about common issues. Srinivas Sista Google Chrome
An OpenAI engineer was arrested after the company said it discovered a "sophisticated recording device" hidden in one of its offices. The employee was identified as Abdulrahman Alfozan, a 35-year-old Saudi national. Alfozan is charged with using or endeavoring to use a device to intercept oral communications, according to a press release from the Department […]
A federal judge ruled that Apple can access OpenAI's interview materials involving former Apple employees, as well as private messages and testimony from key figures in the case.
Ex-FEMA CFO Mary Comans' name was cleared by a federal judge after Elon Musk and other government officials falsely accused her of criminal actions in 2025.
Apple Music's iconic red app icon has reportedly been replaced with a black-and-white version in the latest iOS 27.2 beta, 9to5Mac reports. The eighth note on the icon also appears to have a slightly sharper angle than the original. A new Apple Music logo was also spotted last month on the Apple Music Hall website, […]
The night before AGNTCon + MCPCon Europe, we hosted the Agentic AI Foundation community at the JetBrains office in Amsterdam. The event filled up fast and went to a waitlist, which is not what I expected for a Wednesday evening discussion about how open foundations work. Ibrahim Malik opening the evening. The panel asked what […]
Six Democratic and six Republican senators wrote a letter calling on President Trump to withdraw from his recent deal with Russian President Vladimir Putin.
More AI agents will soon be able to browse and purchase from Shopify listings, marking an expansion of the company's agentic commerce ambitions. Shopify announced Tuesday it will let shoppers configure their AI agents to purchase products on their behalf, giving more agents access to over a billion listings in Shopify's catalog. (The catalog consists […]
Locals and preservationists have long opposed Trump's plan to redevelop a municipal D.C. golf course. That legal fight escalated after the government cleared hundreds of trees on short notice.
Guitoro is a free browser guitar using recordings of real instruments. You can strum with your keyboard, mouse, or touchscreen, choose acoustic, classical, electric guitar or bass, and see chord fingering and each stroke. Song practice can be slowed to 20%, and there are free chord tools and tuners. No signup or download. 1 minute video demo: https://youtu.be/DtcluMLdSgs I would love feedback on how the strumming feels and sounds. Comments URL: https://news.ycombinator.com/item?id=50077020 Points: 447 # Comments: 115
406 scientists, including Geoffrey Hinton, Yoshua Bengio, and Stuart Russell, are demanding that companies immediately disconnect AI models from the internet. Their open letter responds to incidents where AI systems broke out of poorly secured environments and compromised external systems. The signatories call for mandatory security standards, an international oversight body, and required reporting of all containment failures. The article 406 scientists demand AI models be cut off from the internet immediately appeared first on The Decoder .
CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges. The post Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN appeared first on SecurityWeek .
More than 50 families call for investigation into how Vincent Chan was allowed to return to job after inquiry by nursery The parents of the victims of paedophile nursery worker Vincent Chan have reacted with fury to the news that he was cleared to return to work after “significant concerns” were raised by the parent of a young girl. As first revealed in the Guardian , Chan was reported to his employer, the nursery chain Bright Horizons, by a concerned parent in 2021. Continue reading...
Gemini 4 Argon, Google’s newest frontier model, is now generally available in GitHub Copilot. It is designed for complex coding, agentic, and reasoning tasks. In early testing, Gemini 4 Argon… The post Gemini 4 Argon in GitHub Copilot appeared first on The GitHub Blog .