# CERT-FR flags Chrome multi-CVE update

Published: 2026-10-21 · Severity: elevated
Canonical: https://vorant.io/reports/13807e43-e53e-5a98-8f25-0c9a9f148cf4/cert-fr-flags-chrome-multi-cve-update

> CERT-FR advises updating Chrome before 156.0.8078.47/48 to fix numerous unspecified security vulnerabilities disclosed by Google.

CERT-FR has published an advisory covering multiple vulnerabilities in Google Chrome, affecting versions prior to 156.0.8078.47 for Windows and Linux, and prior to 156.0.8078.48 for macOS. The advisory references Google's stable channel update blog post from 20 October 2026 and enumerates a very large number of CVE identifiers (over 350) associated with this release, none of which are described in detail — the risk level is explicitly listed as 'Non spécifié par l'éditeur' (not specified by the vendor).

No technical details, exploitation status, or severity ratings are provided for any individual CVE in this bulletin; CERT-FR simply relays Google's release and the full CVE list. Defenders should treat this as a standard browser security update and apply it through normal patch management channels, prioritizing endpoints with internet-facing Chrome usage. There is no indication in this advisory of active exploitation in the wild for any of the listed CVEs.

## Mentioned in this report

- Vulnerabilities: CVE-2026-112992, CVE-2026-112993, CVE-2026-112994, CVE-2026-112995, CVE-2026-112996, CVE-2026-112997, CVE-2026-112998, CVE-2026-112999, CVE-2026-113000, CVE-2026-113001, CVE-2026-113002, CVE-2026-113003, CVE-2026-113004, CVE-2026-113005, CVE-2026-113006, CVE-2026-113007, CVE-2026-113008, CVE-2026-113009, CVE-2026-113010, CVE-2026-113011, CVE-2026-113012, CVE-2026-113013, CVE-2026-113014, CVE-2026-113015, CVE-2026-113016, CVE-2026-113017, CVE-2026-113018, CVE-2026-113019, CVE-2026-113020, CVE-2026-113021, CVE-2026-113022, CVE-2026-113023, CVE-2026-113024, CVE-2026-113025, CVE-2026-113026, CVE-2026-113027, CVE-2026-113028, CVE-2026-113029, CVE-2026-113030, CVE-2026-113031

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1357

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/13807e43-e53e-5a98-8f25-0c9a9f148cf4/cert-fr-flags-chrome-multi-cve-update.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup