Chrome 155's security update credits Claude for two of its bug finds
The stable release patches 247 vulnerabilities, including four critical use-after-free bugs; an Anthropic researcher used Claude to help find two of them.
Google pushed Chrome 155 to the stable channel on 6 October — version 155.0.8059.39/.40 on Windows and Mac, 155.0.8059.39 on Linux — patching 247 security issues, 4 of them critical.
All four critical bugs are use-after-free flaws, in the Chromecast, Browser, Navigation and Track components (CVE-2026-106382, CVE-2026-106197, CVE-2026-106358 and CVE-2026-106347). Google’s own team found the Chromecast bug; researcher Xinyang Ge at Anthropic reported the other three, and says Claude helped identify two of them, the Navigation and Track flaws. The release also fixes 53 high-severity bugs and a further 190 rated medium or low, with external researchers credited for 62 of the total. Google’s advisory makes no mention of any of the 247 being exploited in the wild.
Why it matters: this lands on every Chromium-based browser, not just Chrome, so the patch reaches Edge, Brave and Opera users too — update rather than wait for auto-update to catch up on a release with four critical memory-safety bugs. It’s also a small, concrete data point for a claim that’s mostly been marketing until now: an AI model contributing to finding real security bugs in one of the world’s largest C++ codebases.
The caveat: Google hasn’t published technical detail on the bugs Claude helped find, and “assisted by” isn’t the same as “found unassisted” — this is one credit line, not evidence of a trend.