Chrome just closed 247 security holes in a single update

Two hundred and forty-seven. That is how many security flaws Google fixed in one Chrome release this week, and it is not a typo. It is the largest single batch the browser has shipped in a long while.

The new build is 155.0.8059.39 and .40 on Windows and Mac, with Linux and Android on .39. Four of the fixes are rated critical, all of them use-after-free bugs, in the Chromecast, Browser, Navigation and Track components: CVE-2026-106382, CVE-2026-106197, CVE-2026-106358 and CVE-2026-106347. Two of those let a booby-trapped web page run code outside Chrome's sandbox, which is the barrier that normally keeps a bad site from touching the rest of your machine. Another 53 are rated high. Outside researchers filed 62 of the reports and Google has paid out around 33,000 dollars so far, with roughly 50 awards still undecided. One researcher, Xinyang Ge, accounted for about a dozen findings, several of them turned up with AI assistance.

Here is the good bit: Google says none of these are being exploited in the wild. That is the whole reason to do this today rather than next month. Chrome downloads updates quietly in the background but will not finish the job until you close and reopen it, and plenty of people have not closed Chrome since August. Open the three-dot menu, pick Help, then About Google Chrome, and let it relaunch. Edge is built on the same engine, so its version of these fixes follows shortly after.

If restarting things is not your habit, Tendvane's app update check runs through what is installed on the PC and tells you which programs are behind, Chrome included.