Vulnerabilities & Exploits

Chrome 154 Lands With 108 Security Fixes

Google released Chrome 154 to stable with 108 security fixes, including 11 critical and 25 high-severity flaws. Google and CSIRT Italia said the update covers Windows, macOS, and Linux builds, with no report of active exploitation.

Many of the critical bugs are memory-safety problems in core browser paths such as ANGLE, WebGL, GPU, ServiceWorker, and Fullscreen, including buffer overflows, out-of-bounds writes, and use-after-free defects. That means the browser itself had enough fault lines that a delayed update leaves a large mix of code paths exposed, even though this is routine patching rather than incident response.

For teams that run Chrome across managed fleets, the exposure is the normal browser maintenance window: systems that sit on older builds keep carrying the fixed flaws until the next update cycle lands.

2 sources · 6h ago

Timeline

Sources

Part of the PlainSec briefing for 2026-09-30

Every edition of this story: Chrome 154 Lands With 108 Security Fixes

More from today