Chrome 154 Fixes 108 Security Vulnerabilities, Including 11 Critical Flaws
Google released Chrome 154 for Windows, macOS, and Linux. The update fixes 108 security flaws, 11 of which are rated Critical.
Chrome 154 includes 108 security fixes in the Chrome browser. The stable version was released for Windows, macOS, and Linux on September 22, 2026, and also includes 11 flaws rated Critical.
Google is rolling out the release gradually over days to weeks, so it may not appear immediately on all devices. The fixed version for Linux is 154.0.8037.57. Windows and macOS users are expected to receive version 154.0.8037.57 or 154.0.8037.58.
Chrome 154 Fixes Bugs in Graphics and Web Features
The critical fixes include buffer overflows, out-of-bounds writes, and use-after-free bugs. These issues affect multiple browser components, including ANGLE, GPU, WebGL, ServiceWorker, Fullscreen, WindowDialog, and AdFilter.
According to the security bulletin, depending on their nature, individual vulnerabilities could lead, for example, to remote code execution, bypassing security restrictions, information disclosure, or denial of service. The specific possibilities vary for each flaw, and details of some flaws remain limited until most users receive the fix.
Google Did Not Report Active Exploitation
In its announcement, Google did not state that any of the 108 fixed vulnerabilities were being actively exploited in real-world attacks. However, this is not independent confirmation that no such exploitation occurred.
The browser processes untrusted web content, so users and device administrators should verify deployment of the latest Chrome 154 version, especially in light of the 11 critical fixes.
What Users and Administrators Should Do
Users and administrators should verify that the latest version is deployed on supported platforms.
- Linux: version 154.0.8037.57.
- Windows and macOS: version 154.0.8037.57 or 154.0.8037.58.
- In managed environments, it is advisable to verify deployment status on supported platforms.
In the coming period, it will be important to monitor completion of the gradual rollout, any publication of additional technical details or CVE records, and possible later information about exploitation of any of the fixed flaws.
Sources
- Chrome Releases – Officially confirms the release of Chrome 154, the fixed versions, 108 security fixes, 11 critical flaws, and the gradual rollout.
- HKCERT – An independent security bulletin lists the affected versions, fixed versions, and possible vulnerability impacts.
- SecurityWeek – Corroborates the number of critical and high-severity flaws and notes that Google did not report active exploitation with this release.
Verified and updated: 09/23/2026 15:29
