1.0 Introduction
Recently, Google has released security updates to address multiple vulnerabilities in Google Chrome. Google promoted Chrome 156 to the stable channel for Windows, Mac and Linux.
2.0 Impact
Successful exploitation of these vulnerabilities may allow a remote attacker to execute arbitrary code on the targeted system, when a user visits a specially crafted web page. The fixes include a use-after-free in the Permissions component that could allow arbitrary code execution inside the sandbox via a crafted HTML page, memory corruption in the Chromoting component, and memory corruption in the Core component that could allow memory to be read inside the sandbox. Other flaws in the release affect components such as ANGLE, PDF, Canvas, DevTools and V8. This may lead to execution of arbitrary code, unauthorised access to sensitive information and system compromise.
3.0 Affected Products
- Google Chrome versions prior to 156.0.8078.47 (Windows, Mac, Linux and Android)
4.0 Recommendations
CyberSecurity Malaysia encourages users and administrators to review the following Chrome Releases announcement and apply the necessary updates. Users are advised to update Google Chrome to version 156.0.8078.47 or later and relaunch the browser for the update to take effect. Users can check the version under Settings > About Chrome. Organisations should also update other Chromium-based browsers, such as Microsoft Edge, once the vendor releases fixes.
Kindly refer to the following URL:
- https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html
Generally, we advise users to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact Cyber999 Incident Response Centre through the following channels:
E-mail: cyber999[at]cybersecurity.my
Phone: 1-300-88-2999 (monitored during business hours)
Mobile: +60 19 2665850 (24x7 call incident reporting)
Business Hours: Mon - Fri 08:30 -17:30 MYT
Web: https://www.cybersecurity.my
5.0 References
- https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html