---
title: Chrome 156 stable fixes 353 security bugs, six critical, with AI tools credited on several | ctxsec
url: https://ctxsec.com/items/chrome-156-353-fixes-oct-20
description: ""
status: "confirmed (Chrome Releases blog, Oct 20; no in-the-wild exploitation stated)"
published: 2026-10-20
---

> 

[← Cybersecurity News](/news) · [markdown](/items/chrome-156-353-fixes-oct-20.md)

confirmed (Chrome Releases blog, Oct 20; no in-the-wild exploitation stated)

2026-10-20

### Chrome 156 stable fixes 353 security bugs, six critical, with AI tools credited on several

Google promoted **Chrome 156** to stable (156.0.8078.47 Linux, .47/.48 Windows/Mac) with **353 security fixes**. The six critical ones are memory corruption in Skia (CVE-2026-113341), Accessibility (CVE-2026-113279), CSS (CVE-2026-113072), Paint (CVE-2026-113280) and WebRTC (CVE-2026-113303), plus a use-after-free in Accessibility (CVE-2026-113271). Several criticals and highs are credited to Xinyang Ge (Anthropic) "assisted by Claude" and to OpenAI Codex Security. Google's post does not say any are exploited. The Canadian Cyber Centre issued advisory AV26-1069. Rollout is staged, so managed fleets should confirm the new build is actually running.

Sources: [Chrome Releases: Stable Channel Update for Desktop (Oct 20)](https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html) · [Canadian Centre for Cyber Security AV26-1069](https://www.cyber.gc.ca/en/alerts-advisories/google-chrome-security-advisory-av26-1069)