Chrome 154 stable (22 Sep): 108 security fixes incl. multiple Critical ANGLE/GPU/WebGL/ServiceWorker bugs
Google Chrome Releases (22 September 2026) promoted Chrome 154 to stable for Windows, Mac and Linux (154.0.8037.57 Linux; 154.0.8037.57/.58 Windows/Mac) with 108 security fixes. Critical examples named in the bulletin include CVE-2026-95350 / CVE-2026-95281 / CVE-2026-95284 (buffer overflow in ANGLE), CVE-2026-95357 / CVE-2026-95322 (out-of-bounds write in GPU), CVE-2026-95349 / CVE-2026-95329 (buffer overflow / OOB write in WebGL), CVE-2026-95339 (UAF ServiceWorker), CVE-2026-95313 (UAF Fullscreen), CVE-2026-95356 (UAF WindowDialog), CVE-2026-95310 (UAF AdFilter). Bug details may stay restricted until majority uptake. Distinct from desk chrome-153-firefox-156-20260915. Primary: Chrome Releases stable-channel update 22 Sep 2026.
- Product
- Google Chrome / Chromium desktop (Windows, Mac, Linux)
- Versions
- Update to Chrome 154.0.8037.57 (Linux) or 154.0.8037.57/.58 (Windows/Mac) or later stable; managed fleets should confirm 154 rollout
- Exploited in Australia?
- unknown
- Patch to
- Update Chrome via Help → About Google Chrome (or enterprise management) to 154.x stable; verify managed endpoints reach 154; prioritise internet-facing / high-risk browsing fleets given multiple Critical ANGLE/GPU/WebGL fixes
Primary: Chrome Releases — Stable Channel Update for Desktop (Chrome 154, 22 Sep 2026) · Vendor: Google Chrome Releases · CVE: CVE-2026-95350, CVE-2026-95281, CVE-2026-95284, CVE-2026-95357, CVE-2026-95322, CVE-2026-95349, CVE-2026-95329, CVE-2026-95339, CVE-2026-95313, CVE-2026-95356, CVE-2026-95310 · Cyber Security News — amplify (23 Sep 2026)