Google Chrome 154 Patches 108 Security Flaws, Including 11 Critical Vulnerabilities

Google has rolled out Chrome 154, and this is one of those updates that is worth installing rather than putting off. The latest stable release patches 108 security vulnerabilities, including 11 critical flaws, although Google hasn’t said that any of the vulnerabilities fixed in Chrome 154 are being exploited in the wild.

Chrome 154 patches 108 security vulnerabilities

The update is rolling out for Windows, Mac (154.0.8037.57) and Linux (154.0.8037.58) with Google saying the rollout will continue over the coming days and weeks. Alongside the security fixes, the release includes other changes and improvements, but the sheer number of patched flaws is what stands out this time.

Of the 108 security fixes, 11 are rated critical and 25 are rated high severity. The critical list includes buffer overflows in ANGLE and WebGL, out-of-bounds writes affecting GPU components, and use-after-free vulnerabilities in areas including ServiceWorker, Fullscreen, WindowDialog and AdFilter.

Google’s advisory also shows that 32 of the vulnerabilities were reported by external security researchers, while the company discovered the remaining issues itself. Google has so far listed $18,000 in rewards for some of the externally reported bugs, although several bounty amounts are still marked as pending.

What about a Chrome zero-day?

There isn’t a confirmed zero-day in the Chrome 154 security list. Google hasn’t reported any of these 108 vulnerabilities as being exploited in the wild. That doesn’t mean Chrome users have had a quiet month. An earlier Chrome 153 update addressed an actively exploited V8 zero-day, CVE-2026-87491, showing why keeping the browser updated remains important even when the newest release isn’t carrying a known in-the-wild exploit.

Chrome 154 is already rolling out, so it may take a little time before every device receives it. If you haven’t received the update automatically, checking Chrome’s About page should tell you whether version 154 is available.

In other Chrome news, Google is testing a redesigned Tab Search experience that puts Tab Groups front and center. Meanwhile, the newly disclosed BragJack attack shows how AI assistants in Chrome, Edge, and other browsers can be hijacked through malicious webpages.