Chrome Security Vulnerabilities: 247 Flaws Patched in Major Update…One Hole Found by AI

Google updated its Chrome browser desktop stable version to 155.0.8059.39/.40 on the 6th (local time). In an exceptional scale, the company fixed 247 security vulnerabilities in a single update, and the security community is recommending immediate updates to users on previous versions.

The most notable vulnerability is a privilege error (CVE-2026-102322) in the Site Isolation feature. It is a vulnerability that allows remote attackers to bypass the browser's isolation protection simply by visiting a manipulated webpage. The U.S. National Vulnerability Database (NVD) has rated the severity level as 9.6 out of 10, classified as "critical." The update also includes two additional "critical" level memory-use-after-free (UAF) vulnerabilities.

A striking detail is the list of discoverers. Google's release notes specify that one of these vulnerabilities was "reported by a researcher at Anthropic with the assistance of AI assistant Claude." This marks the official release notes documenting an era in which AI, rather than human hackers, is discovering browser security holes.

The current Chrome version can be checked by entering chrome://settings/help in the address bar, and automatic updates proceed from this screen. Once the update is applied, the browser will close and restart, so any documents in use should be saved beforehand. Since a considerable number of government offices and corporate PCs use Chrome as their default browser, IT administrators at these organizations need to conduct comprehensive checks.