Google Chrome Stable Security Update Advisory (CVE-2026-106382, UAF, Type Confusion)

Vulnerability Overview Google Chrome has released a stable update that fixes multiple security vulnerabilities. These vulnerabilities include use-after-free, uninitialized resource, type confusion, race condition, incomplete cleanup, integer overflow, information leak, and incorrect authorization. Affected Versions Windows and Mac: Version 155.0.8059.39/40 Linux: Version 155.0.8059.39 Mitigation Security Fixes: A total of 247 security vulnerabilities have been fixed. Detailed Fix List: - Critical CVE-2026-106382: Use-after-free, reported by Google, on 2026-07-15 - Critical CVE-2026-106197: Use-after-free, reported by Xinyang Ge, on 2026-09-11 - Critical CVE-2026-106358: Use-after-free, reported by Xinyang Ge, on 2026-09-28 - Critical CVE-2026-106347: Use-after-free, reported by Xinyang Ge, on 2026-09-30 - High CVE-2026-102322: Incorrect authorization, reported by Avadhut Mahamuni, on 2026-06-23 - High CVE-2026-106245: Uninitialized resource, reported by Jonathan Bouman, on 2026-08-21 - High CVE-2026-106327: Incorrect authorization, reported by OGINOME Tomohito, on 2026-08-23 - High CVE-2026-106366: Incomplete cleanup, reported by Naoya Miyaguchi, on 2026-08-24 - High CVE-2026-106258: Uninitialized resource, reported by weihengqiu, on 2026-08-28 - High CVE-2026-106376: Uninitialized resource, reported by weihengqiu, on 2026-08-28 - High CVE-2026-106308: Incorrect reference resolution, reported by Anonymous, on 2026-09-11 - High CVE-2026-106215: Uninitialized resource, reported by Jonathan Bouman, on 2026-09-13 - High CVE-2026-106369: Missing authorization, reported by M. Fauzan Wijaya, on 2026-07-26 - High CVE-2026-106293: Type confusion, reported by Jinryo Lee, on 2026-08-16 - High CVE-2026-106377: Race condition, reported by Google, on 2026-06-05 - High CVE-2026-106412: Race condition, reported by Google, on 2026-06-06 - High CVE-2026-106243: Incomplete cleanup, reported by Google, on 2026-07-10 - High CVE-2026-106214: Information leak, reported by Google, on 2026-07-10 - High CVE-2026-106364: Incorrect authorization, reported by Google, on 2026-07-28 - High CVE-2026-106239: Integer overflow, reported by Google, on 2026-08-14 - High CVE-2026-106426: Race condition, reported by Emond Papegaaij, on 2026-08-17 - High CVE-2026-106419: Use-after-free, reported by Shaked Reiner, on 2026-08-21 - High CVE-2026-106396: Incorrect input validation, reported by Google, on 2026-08-25 - High CVE-2026-106323: Missing authorization, reported by Google, on 2026-08-26 - High CVE-2026-106231: Uninitialized resource, reported by Google, on 2026-08-26 - High CVE-2026-106202: Uninitialized resource, reported by Google, on 2026-08-26 - High CVE-2026-106273: Uninitialized resource, reported by Google, on 2026-08-26 - High CVE-2026-106203: Incomplete cleanup, reported by Anonymous, on 2026-08-27 - High CVE-2026-106332: Integer overflow, reported by Google, on 2026-08-27 - High CVE-2026-106281: Use-after-free, reported by 0599jyangc, on 2026-08-31 - High CVE-2026-106298: Use-after-free, reported by TIENPA, on 2026-09-02 - High CVE-2026-106193: Use-after-free, reported by Blockchain Creator of Krutt, on 2026-09-05 - High CVE-2026-106255: Race condition, reported by Google, on 2026-09-10 - High CVE-2026-106393: Use-after-free, reported by Xinyang Ge, on 2026-09-10 - High CVE-2026-106227: Use-after-free, reported by Google, on 2026-09-15 - High CVE-2026-106379: Uninitialized resource, reported by Google, on 2026-09-15 - High CVE-2026-106211: Use-after-free, reported by Google, on 2026-09-15 - High CVE-2026-106329: Incorrect authorization, reported by Google, on 2026-09-15 - High CVE-2026-106248: Use-after-free, reported by Alessandro Rizzo, on 2026-09-19 - High CVE-2026-106235: Use-after-free, reported by Team Allied, on 2026-09-24 - High CVE-2026-106257: Use-after-free, reported by OpenAI Codex Security, on 2026-09-24 - High CVE-2026-106268: Use-after-free, reported by xinyang, on 2026-09-24 - High CVE-2026-106278: Use-after-free, reported by Xinyang Ge, on 2026-09-24 - High CVE-2026-106233: Use-after-free, reported by Xinyang Ge, on 2026-09-24 - High CVE-2026-106318: Use-after-free, reported by Xinyang Ge, on 2026-09-25 - High CVE-2026-106311: Use-after-free, reported by Xinyang Ge, on 2026-09-25 - High CVE-2026-106423: Use-after-free, reported by Xinyang Ge, on 2026-09-25 - High CVE-2026-106346: Incorrect status validation, reported by Google, on 2026-09-26 - High CVE-2026-106190: Use-after-free, reported by weihengqiu, on 2026-09-27 - High CVE-2026-106357: Use-after-free, reported by Xinyang Ge, on 2026-09-28 - High CVE-2026-106240: Type confusion, reported by OpenAI Codex Security, on 2026-09-28 - High CVE-2026-106184: Uninitialized resource, reported by James Burton, on 2026-09-29 - High CVE-2026-106383: Use-after-free, reported by Xinyang Ge, on 2026-09-29 - High CVE-2026-106349: Use-after-free, reported by Xinyang Ge, on 2026-09-29 - High CVE-2026-106421: Use-after-free, reported by Xinyang Ge, on 2026-09-30 - High CVE-2026-10

Goal Reached Thanks to every supporter — we hit 100%!

Google Chrome Stable Security Update Advisory (CVE-2026-106382, UAF, Type Confusion)