Skip to content
Tuesday, October 20, 2026AboutContactRSS
Chrome Patch Fixes 37 Bugs Including Seven Critical Vulnerabilities in Latest Update
Tech News

Chrome Patch Fixes 37 Bugs Including Seven Critical Vulnerabilities in Latest Update

Malwarebytes Labs reports that Google has released an update for Chrome addressing thirty-seven vulnerabilities, including seven rated as critical severity.

Key points

  • Google fixed thirty-seven security flaws in its latest Chrome update.
  • Seven of these vulnerabilities are classified as critical.
  • Malwarebytes Labs highlighted this release in their weekly security summary.

Google has released a security update for its Chrome web browser to address thirty-seven identified vulnerabilities. According to Malwarebytes Labs, this patch includes fixes for seven bugs that are rated as critical. The news outlet listed this update in its summary of security events for the week of October 12 to October 18, 2026.

Root cause

The source material does not provide technical details on the underlying code errors or the specific nature of the flaws. It only confirms that Google addressed a total of thirty-seven security issues. Seven of these were deemed critical, indicating a higher risk level compared to the remaining thirty issues. No specific CVE identifiers or code components are named in the report.

Attack path

Malwarebytes Labs does not describe how these vulnerabilities could be exploited or if any active attacks have been observed. The report simply lists the update as a notable security event for the week. Without further technical analysis, the potential attack vectors remain undefined in this summary. Readers are advised to apply the patch to maintain browser security.

Affected versions

The source material does not specify which versions of Chrome are affected by these thirty-seven flaws. It only states that Google fixed them in an October update. Users of previous versions should update their browsers to ensure they receive these security patches. The exact version numbers are not provided in the Malwarebytes Labs summary.

Mitigation

  • Install the latest update for Google Chrome immediately.
  • Enable automatic updates for the browser to ensure future patches are applied.
  • Verify that your browser version is up to date after the installation.

Why it matters

Critical browser flaws often allow remote code execution or data theft without user interaction. Teams usually monitor vendor advisories to assess risk exposure. Check whether your internal policies require immediate patching for critical ratings. Ensure that legacy browsers are not in use on managed devices. Verify that update mechanisms are functioning correctly across all endpoints. Monitor for any signs of exploitation attempts following the release.

What to do and how to stay safe: Google Chrome

  • Check your current Chrome version against the latest release from Google.
  • Ensure your operating system and browser are set to update automatically.
  • Review your organisation's patch management schedule for timely application.
  • Monitor security advisories from Google for further details on the flaws.

Step-by-step guide: Password Policies Examples That Reduce Password Fatigue

General security guidance from the Vector Bulletin newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

How many critical flaws were fixed in the Chrome update?

Google fixed seven critical security flaws in the update, according to Malwarebytes Labs.

When was this security update reported?

Malwarebytes Labs reported it in their summary for the week of October 12 to October 18, 2026.

Which specific Chrome versions are affected?

The source material does not specify the affected versions of Google Chrome.

Sources

  1. Malwarebytes Labs
Google ChromeMalwarebytes Labssecurity updatecritical vulnerability

Related stories

Chrome can now share clipboard data with Google servers for scam protection

The browser has gained the ability to transmit copied text to Google, a move described as enhancing scam protection while increasing data collection.