Chrome 154 Reaches the Stable Channel with 108 Security Fixes

What happened

On 22 September 2026 the Chrome team announced the promotion of Chrome 154 to the stable channel for Windows, Mac and Linux. The build is 154.0.8037.57 on Linux and 154.0.8037.57/.58 on Windows and Mac. Google says the update "will roll out over the coming days/weeks", so not every device sees it on the same day.

What we know

• The release post says the update includes 108 security fixes.
• The published list opens with eleven issues rated Critical. They include buffer overflows in ANGLE and WebGL, out-of-bounds writes in the GPU component, and use-after-free bugs in ServiceWorker, Fullscreen, WindowDialog and AdFilter.
• Several entries carry bug-bounty amounts. CVE-2026-95350, a buffer overflow in ANGLE reported by researchers at STAR Labs SG, is listed with a $5,000 reward.
• Google notes that access to bug details may stay restricted until most users have updated, and longer when a bug sits in a third-party library other projects also use.
• The post does not describe new features. It points to the change log and says to watch for upcoming Chrome and Chromium blog posts about what shipped in 154.

What is not yet confirmed

The announcement does not say whether any of the fixed vulnerabilities were exploited before the patch, and this summary does not assume that either way. VoltKit has not independently tested the build or reviewed the full change log.

Why it matters

Graphics and GPU bugs of the kind listed here are reachable from ordinary web pages, which is why browser vendors treat them as Critical. If Chrome has not updated itself yet, opening the "About Chrome" page in settings triggers the check. Chromium-based browsers such as Edge, Brave and Opera usually pick up the same fixes in their own releases over the following days.