Chromium 155 fixes 10 security flaws including critical prerender bug

Google has released Chromium 155.0.8059.84/.85 for Windows, Mac, and Linux with 10 security fixes. The update addresses one critical vulnerability in prerender functionality and six high-severity memory corruption and use-after-free bugs across V8, DOM, Core, and SVG components. Three medium-severity issues in Desktop, Compositing, and Workers are also patched. Notably, one high-severity DOM memory corruption bug was reported by Anthropic researcher Xinyang Ge with assistance from Claude.

Security fixes in Chromium 155

• Critical: CVE-2026-110922 — use-after-free in Prerender, reported 2026-10-02
• High (6 bugs): two use-after-free in V8 (CVE-2026-110919, CVE-2026-110921), memory corruption in DOM (CVE-2026-110913), Core (CVE-2026-110918), SVG (CVE-2026-110917), and V8 (CVE-2026-110920)
• Medium (3 bugs): improper input validation in Desktop, use-after-free in Compositing, memory corruption in Workers
• CVE-2026-110913: DOM bug reported by Anthropic's Xinyang Ge with Claude assistance
• Rollout to Linux users will occur over coming days/weeks

Why it matters

The critical prerender vulnerability and multiple V8 memory safety bugs affect all Chromium-based browsers including Google Chrome, Microsoft Edge, Brave, and Opera. Linux distributions packaging Chromium will need to track this update. The involvement of an AI assistant (Claude) in vulnerability discovery may signal a shift in security research workflows.