Google released a major Chrome update fixing 37 security issues, including seven critical bugs, as part of its regular maintenance cycle.
Key points
- Google patched 37 security flaws in Chrome during the week of October 12 to 18, 2026.
- Seven of these vulnerabilities were rated critical severity by the vendor.
- The update coincided with record Windows patches for a flaw already under attack.
Google released a significant security update for its Chrome web browser during the week of October 12 to October 18, 2026. The patch addressed 37 distinct security flaws, seven of which were classified as critical.
What happened
According to Malwarebytes Labs, Google fixed 37 security issues in Chrome during its October 12 to October 18, 2026 update cycle. Seven of these vulnerabilities received a critical severity rating from the vendor. This browser update was released alongside other major security news. Microsoft also issued a record number of Windows patches. Those Windows updates addressed a specific flaw that attackers were already exploiting in the wild.
Why it matters
Browser updates are essential because web browsers are the primary interface between users and the internet. Critical flaws often allow remote code execution, meaning attackers can control a device simply by tricking a user into visiting a malicious website. These vulnerabilities do not require user interaction beyond clicking a link or loading a page. Keeping software current closes these entry points before attackers can develop widespread exploits.
The fix
- Download and install the latest version of Google Chrome immediately.
- Verify that the browser is set to update automatically to receive future patches.
- Check for any pending Windows updates and install them to protect the operating system.
Why it matters
Security teams monitor vulnerability databases to prioritize which patches to deploy first. Critical ratings indicate that a flaw is easy to exploit and has a high impact on confidentiality, integrity, or availability. When a vendor releases a patch for a critical bug, it means the underlying code has a serious defect that could be abused by attackers. Organizations usually prioritize these updates over lower-severity fixes. Users should understand that delaying installation leaves their devices exposed to known risks that are actively being targeted by cybercriminals.
Background: Browser updates
Browser updates are software patches that fix security holes, improve stability, and add features. They stop attackers from exploiting known weaknesses in the code that renders web pages. Without them, your browser is an open door for malware and data theft.
Read the full guide: Browser Updates: Why They Are Your First Line of Defense
What to do and how to stay safe: Google
- Update your web browser to the latest version available from the official vendor site.
- Enable automatic updates for your operating system and browser applications.
- Review your browser extensions and remove any that are no longer needed or from unknown sources.
- Clear your browser cache and cookies after updating to ensure a clean state.
Step-by-step guide: What is password policies and how they protect systems
General security guidance from the Crypt Weekly newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
How many critical bugs were fixed in this Chrome update?
Google fixed seven critical security flaws in the Chrome update released in October 2026.
Did Microsoft also release updates during this period?
Yes, Microsoft issued a record number of Windows patches that addressed a flaw already under attack.
What other security events were reported in this timeframe?
Malwarebytes Labs also reported on AI worms, sextortion scams, and data sharing issues with Grindr.
