Google has released the Chrome 154 update, fixing 108 security vulnerabilities. These include 11 critical vulnerabilities related to memory corruption, buffer overflows, and other serious issues.
A major security update has been released for Google Chrome users. Google has launched the new stable version of Chrome 154, addressing a total of 108 security vulnerabilities. Of these, 11 fall into the “Critical” category. Several vulnerabilities could be exploited by cyber attackers to target the browser through specific types of websites or web content.
The Chrome 154 update is currently rolling out to Windows, macOS, and Linux users. Versions 154.0.8037.57/.58 have been made available for Windows and macOS, while version 154.0.8037.57 is available for Linux. The update is gradually reaching all users.
11 Critical Security Vulnerabilities Fixed
Among the 11 critical vulnerabilities fixed in this update, many are related to memory safety and memory corruption. Key Chrome components such as ANGLE, WebGL, and the GPU were affected. Memory corruption vulnerabilities are considered serious because, under certain conditions, attackers can modify the browser’s memory and potentially execute their own code.
These include an ANGLE buffer overflow vulnerability identified as CVE-2026-95350. ANGLE is a crucial graphics component in Chrome responsible for translating graphics commands across different platforms. According to reports, Google awarded a $5,000 bug bounty for this vulnerability. Other critical buffer overflow vulnerabilities in ANGLE, such as CVE-2026-95281 and CVE-2026-95284, have also been fixed.
Serious Vulnerabilities in WebGL and GPU
Several critical vulnerabilities related to WebGL have also been addressed in Chrome 154. These include the CVE-2026-95349 buffer overflow and the CVE-2026-95329 out-of-bounds write. Out-of-bounds write vulnerabilities, such as CVE-2026-95357 and CVE-2026-95322, have also been patched in the GPU component.
Additionally, “Use-After-Free” vulnerabilities affecting ServiceWorker, Fullscreen, WindowDialog, and AdFilter have been fixed. Such vulnerabilities occur when software attempts to access memory that has already been released; this flaw can be exploited to compromise security.
Several High-Severity Vulnerabilities Also Fixed
In addition to critical flaws, Chrome 154 addresses a significant number of high-severity security issues. These include an authorization-related issue in Extensions, UI misrepresentation in SecurityIndicators, and Use-After-Free vulnerabilities in components such as Browser, Bluetooth, PDFium, WebAudio, and GPU. Serious flaws in the V8 JavaScript engine have also been patched.
According to reports, Google has restricted the release of technical details regarding some of these vulnerabilities to prevent attackers from developing exploits before the security update reaches the majority of users.
Chrome Users Should Update Immediately
If you use Google Chrome, it is essential to update your browser to the latest version. To do this, open Chrome and navigate to the three-dot menu in the top-right corner. Then, click on Help followed by About Google Chrome. Chrome will check for available updates, and once the update is ready, you will see an option to relaunch the browser.
