Google has rolled out a major security update for Chrome across desktop platforms, fixing 108 vulnerabilities, including 11 critical flaws, in a move to enhance browser security and protect users from emerging threats.
Google has pushed out a major Chrome security update for desktop users, closing 108 vulnerabilities in the Stable channel across Linux, Windows and macOS. The new builds are Chrome 154.0.8037.57 on Linux and 154.0.8037.57 or 154.0.8037.58 on Windows and Mac, and Google says 11 of the flaws are rated critical. According to SecurityWeek, the release is unusually large for a browser patch and is dominated by memory-safety problems, the kind of defects that can lead to crashes, corruption or code execution if they are exploited.
The most serious issues include buffer overflows in ANGLE and WebGL, out-of-bounds writes in GPU and WebGL components, and use-after-free bugs affecting ServiceWorker, Fullscreen, WindowDialog and AdFilter. Those categories are significant because they often affect the browser’s rendering and execution layers, which are among the most security-sensitive parts of any modern browser. SecurityWeek reported that external researchers identified nine of the critical flaws and received a combined $18,000 in bug-bounty payments.
Google began rolling out the update on 22 September 2026, and the deployment is continuing over the following days and weeks, according to The Hack Academy and Malwarebytes. That staged release means not every user will see the new version immediately, but the company is urging prompt installation once it appears. Neowin noted that the patch targets the stable release line and that the update is available on all three major desktop platforms.
Beyond the critical cases, the patch set covers a wide spread of high-, medium- and low-severity defects, including problems in V8, DevTools, Navigation, PDFium, Bluetooth, HID and Passwords. The breadth of the list underlines how much of Chrome’s attack surface is spread across graphics, scripting, device integration and user-interface components. Malwarebytes said Google has issued several Chrome updates in close succession in recent days, but the desktop stable-channel release is the most important one for ordinary users because it addresses the broadest security risk.
Although Google has not reported exploitation in the wild, the sheer number of fixes makes this one of the most substantial Chrome security releases in recent memory. For users and IT administrators, the practical advice is straightforward: update as soon as the new build is offered, and treat the release as a priority patch rather than a routine feature refresh.
Disclaimer: This content is intended for informational purposes only. Readers are advised to exercise their own judgement, conduct due diligence, or consult a qualified expert before acting on any information provided.
