Chrome patches a critical Prerender bug, nine days after its last fix
Chrome 155.0.8059.84/.85 fixes ten security bugs, including a critical use-after-free in Prerender. No sign of in-the-wild exploitation yet.
Google pushed Chrome 155.0.8059.84/.85 to the stable channel for Windows and Mac on 15 October, with 155.0.8059.84 for Linux. The release fixes ten security bugs: one critical, six high and three medium, spread across DOM, V8, Core, SVG, Desktop, Compositing and Workers.
The critical bug, CVE-2026-110922, is a use-after-free in Prerender, the feature Chrome uses to load a page in the background before you click its link. The six high-severity fixes are mostly use-after-free and memory corruption bugs in V8 and Core (CVE-2026-110913, CVE-2026-110917 through CVE-2026-110921). Google hasn’t published technical detail on any of them, which is standard practice until most users have updated. This is a separate, smaller patch from the 247-bug release Chrome 155 shipped on 6 October.
Why it matters: this lands on every Chromium-based browser, so Edge, Brave and Opera users get it too once their own builds catch up. A critical use-after-free in a feature that runs silently in the background, before you’ve clicked anything, is worth updating for promptly rather than waiting on auto-update.
The caveat: nothing in Google’s advisory suggests any of these ten are being exploited in the wild.