we_are_coded.by CODE · The world, decoded
БГ
Google

Twelve of the 247 security fixes in Chrome 155 carry the line "assisted by Claude", two of them critical

Google Chrome Releases · event date: 6 October 2026Security

Google released Chrome 155 on 6 October with 247 security fixes, four of them critical. Twelve were reported by Xinyang Ge of Anthropic with Claude's help, two by OpenAI Codex Security. The bulletin says nothing about attacks in the wild.

In short
  • 6 October 2026: Chrome 155 reaches the stable channel with 247 security fixes, four of them rated Critical. The update rolls out over the coming days and weeks.
  • Twelve fixes were reported by Xinyang Ge (Anthropic), "assisted by Claude", between 24 and 30 September: two critical and ten rated High. Two fixes rated High come from OpenAI Codex Security.
  • For none of the 247 does Google say it is being used in attacks in the wild. Chrome updates itself, and the new version starts after a restart.
Checked on12 October 2026Responsible editorCvetelin IvanovHow we workMethod · Corrections

The thirtieth of September. Xinyang Ge of Anthropic reports a critical bug in Chrome, a use after free in the Track component, and in the bulletin the name is followed by "assisted by Claude". On 6 October the fix is in stable Chrome 155. Six days.

The facts: on 6 October 2026 Google released Chrome 155 to the stable channel (155.0.8059.39/.40 for Windows and Mac and 155.0.8059.39 for Linux) with 247 security fixes; the update rolls out over the coming days and weeks. Four of the fixes are rated Critical, and 12 were reported by Xinyang Ge (Anthropic), "assisted by Claude", between 24 and 30 September: the two critical CVE-2026-106358 (use after free in Navigation) and CVE-2026-106347 (use after free in Track), and ten rated High, among them in V8, PDF, WebRTC and Media. Two fixes rated High, in V8 and in HTML, were reported by OpenAI Codex Security. 185 of the fixes were reported by Google itself. The bulletin mentions no exploit in the wild. Google may keep bug details restricted until a majority of users have updated.

Twelve lines with the same signature in a bulletin of 247 fixes. All twelve are use after free, a bug where a program uses memory it has already released. Of the four critical fixes in this version, two have Claude next to the researcher's name, and one belongs to Google itself.

How much of the work is the human's and how much the model's, the bulletin does not say. It says "assisted by", meaning with the help of. Two more lines carry the name Xinyang Ge without Anthropic and Claude next to it, among them a third critical fix. We do not count those toward Claude, because Google does not mark them that way either.

Twelve lines in Google's bulletin, and every one says "assisted by Claude".

The same list also has two fixes signed OpenAI Codex Security, in V8 and in HTML. Anthropic and OpenAI in one Google bulletin. The rest is more familiar: 185 of the fixes, close to three in every four, were reported by Google itself.

There is no urgency this time. For none of the 247 does Google say it is being used in attacks, and Chrome updates itself, as long as you restart it.

Whether it is a direction, one number will tell: how many lines with "assisted by" the next big Chrome bulletin carries, and they are easy to count.

The visual is generated code art. No third-party images.
Follow usFacebookLinkedIn
Official primary sources
→Google Chrome Releases - Stable Channel Update for Desktop (CVE-2026-106358, CVE-2026-106347), 06.10.2026→Google Chrome Help - Update Google Chrome (Computer)
Original: https://wearecoded.com/en/articles/chrome-155-247-popravki-claude.html
ShareFacebookXLinkedInTelegramWhatsApp
← Back to all news