CERT-In warns of critical Chrome flaws; update to version 155 now
Representative image: jarmoluk / Pixabay
CERT-In warned Chrome users on 14 October 2026 of critical flaws; Google's Chrome 155 update fixes 37 vulnerabilities, seven critical, and needs a browser restart.
What Happened
India's cyber security agency CERT-In has warned users of Google Chrome about critical security flaws and urged them to update the browser, after Google released a Chrome 155 security update that fixes 37 vulnerabilities, seven of them rated critical. The warning, reported on Wednesday, 14 October 2026, covers Chrome versions earlier than 155.0.8059.79 on Linux and earlier than 155.0.8059.79/.80 on Windows and macOS. Google pushed the fix to the stable channel on 13 October. According to the advisory and security researchers' reports, attackers could use the flaws to run malicious code, access sensitive information or crash a user's system, in some cases simply by getting the user to open a specially crafted web page.
Key Facts
- CERT-In, the Indian Computer Emergency Response Team, warned Chrome users about the flaws on 14 October 2026.
- Google's update fixes 37 security vulnerabilities, seven of them rated critical.
- Safe versions are Chrome 155.0.8059.79/.80 on Windows and macOS and 155.0.8059.79 on Linux.
- The headline flaw, CVE-2026-110152, is a buffer overflow in ANGLE, the graphics layer Chrome uses.
- According to the vulnerability description, it could be triggered through a crafted HTML page and potentially let a remote attacker run code outside Chrome's sandbox.
- The other critical flaws are memory bugs known as use-after-free, in parts such as the PDF viewer, networking, SVG and media handling.
- Security reports said there was no confirmed active exploitation of the flaws at the time of the update.
Why It Matters
For most young people, the browser is the front door to everything: college portals, banking apps on the web, social media, online classes and job applications. A flaw in the browser is therefore a flaw in all of those. Critical bugs of this kind are especially serious because they can, in theory, let an attacker take control of a device without the user installing anything, just by visiting a booby-trapped page or opening a malicious link.
The good news is that the fix is simple. Chrome updates itself in the background, but the update only takes effect when the browser is restarted. Many people keep dozens of tabs open for days, which means their browser may be running an old, vulnerable version even though the patch has been downloaded. Restarting Chrome after an update is one of the easiest security habits to build.
The update also shows how security research is changing. Several reports credited researchers working with AI tools for finding a large share of the bugs, alongside independent researchers. As more flaws are found faster, users can expect more frequent security updates, which makes keeping software current even more important.
CERT-In issues such advisories regularly for widely used software. Taking them seriously, and updating quickly, protects not only an individual's accounts and data but also shared devices at home, in hostels and at cyber cafes.
| Platform | Safe Chrome version |
|---|---|
| Windows | 155.0.8059.79 or 155.0.8059.80 |
| macOS | 155.0.8059.79 or 155.0.8059.80 |
| Linux | 155.0.8059.79 |
Impact
Short-term: Users should update Chrome to the latest version and restart the browser. Organisations and colleges managing many computers should push the update across their systems.
Long-term: Regular, prompt updating of browsers and apps remains the most effective defence against attacks that exploit newly disclosed flaws.
Who is affected: Anyone using Google Chrome on Windows, macOS or Linux, including students, young professionals, gamers and creators, as well as colleges, offices and cyber cafes with shared computers.
Key Takeaway
CERT-In has warned of critical flaws in Google Chrome; updating to version 155.0.8059.79 or later and restarting the browser closes 37 security holes.
Questions and Answers
What did CERT-In warn Chrome users about?
CERT-In warned on 14 October 2026 about critical vulnerabilities in Google Chrome that could let attackers run code, access sensitive information or crash systems, and advised users to update the browser.
Which Chrome version is safe?
Chrome 155.0.8059.79 or 155.0.8059.80 on Windows and macOS, and 155.0.8059.79 on Linux, which include Google's fixes for 37 security vulnerabilities.
How do I update Google Chrome?
Open Chrome's menu, go to Help and then About Google Chrome. The browser checks for and installs the update, after which you need to click Relaunch to restart it.
Is the Chrome flaw being used in attacks?
Security reports said there was no confirmed active exploitation at the time of the update, but users are still advised to update quickly because details of fixed flaws can help attackers target unpatched browsers.
Disclaimer: Prepared by the Peepals newsroom from publicly available sources with AI assistance. Information is accurate to the best of our knowledge at the time of publication and may change. Images may be representative. Not professional advice. Report an error via our contact page.
Sourced and fact-checked by the Peepals Global Editorial Team
Garba glow on a drip: doctors warn as Ahmedabad youth pay up to Rs 15,000 for IV therapy
Gavaskar questions Shamar Joseph's bouncers at Arshdeep in decided final over
Reported, fact-checked and published by the Peepals Global Editorial Team.
