Chrome 156 stable fixes 353 security bugs, six critical, with AI tools credited on several
Google promoted Chrome 156 to stable (156.0.8078.47 Linux, .47/.48 Windows/Mac) with 353 security fixes. The six critical ones are memory corruption in Skia (CVE-2026-113341), Accessibility (CVE-2026-113279), CSS (CVE-2026-113072), Paint (CVE-2026-113280) and WebRTC (CVE-2026-113303), plus a use-after-free in Accessibility (CVE-2026-113271). Several criticals and highs are credited to Xinyang Ge (Anthropic) "assisted by Claude" and to OpenAI Codex Security. Google's post does not say any are exploited. The Canadian Cyber Centre issued advisory AV26-1069. Rollout is staged, so managed fleets should confirm the new build is actually running.
Sources: Chrome Releases: Stable Channel Update for Desktop (Oct 20) · Canadian Centre for Cyber Security AV26-1069