Chrome 154: 22 Sep stable (108 fixes) + 29 Sep 154.0.8037.92/.93 (32 more incl. Critical CVE-2026-102331 ANGLE)
Google's Chrome Releases blog promoted Chrome 154 to the stable channel on 22 September 2026 (154.0.8037.57 for Linux; 154.0.8037.57/.58 for Windows and Mac) with 108 security fixes, including Critical ANGLE, GPU, WebGL and ServiceWorker bugs (examples: CVE-2026-95350, 95281, 95284, 95357, 95322, 95349, 95329).
UPDATE (29 Sep 2026): a further Stable Channel Update for Desktop rolled out 154.0.8037.92/.93 for Windows and Mac and 154.0.8037.92 for Linux with 32 more security fixes, including Critical CVE-2026-102331 (buffer overflow in ANGLE) and High Mojo, V8, GPU, WebGPU and use-after-free bugs (e.g. CVE-2026-102317, 102299, 102323, 102326, 102328).
Google says access to bug details may be kept restricted until a majority of users are updated. (source: Chrome Releases)
Correction (31 Oct 2026): removed the SecurityWeek link and credit, which this desk cannot read; the line about Firefox ESR releases, which only SecurityWeek gave on this card, is removed, and the card date stays 22 September 2026, Google's date. (source: Chrome Releases)
- Product
- Google Chrome / Chromium desktop (Windows, Mac, Linux)
- Versions
- Update to Chrome ≥154.0.8037.92 (Linux) or ≥154.0.8037.92/.93 (Windows/Mac). Prior 154.0.8037.57/.58 from 22 Sep is superseded for the 29 Sep security train.
- Exploited in Australia?
- unknown
- Patch to
- Update Chrome via Help → About Google Chrome (or enterprise management) to 154.0.8037.92/.93+; verify managed endpoints left the 22 Sep 154.0.8037.57/.58 build; prioritise fleets given Critical ANGLE CVE-2026-102331 in the 29 Sep train.
