If you use Google Chrome as your primary web browser, it is time to check your settings for a crucial update. Google has just rolled out a massive security patch for Chrome, addressing numerous vulnerabilities that could leave your system exposed to cyberattacks.
In its latest release—Chrome 154 for Windows, macOS, and Linux—Google has fixed over 100 security vulnerabilities, including several critical flaws that allow hackers to execute malicious code remotely. Here is everything you need to know about the latest Chrome security update and how to protect your devices.
Inside the Chrome 154 Security Update
Released on September 23, 2026, the Google Chrome 154 update is one of the most significant security rollouts this year. The update addresses a staggering 108 security vulnerabilities, with 11 of them rated as critical.
These critical flaws are primarily “memory-safety” bugs. In the cybersecurity world, memory-corruption vulnerabilities are frequently exploited by hackers because they can allow an attacker to bypass browser security boundaries, alter application memory, and run attacker-controlled code on your machine.
🛡️ Google Chrome 153 Update Fixes 42 Security Flaws, Including 3 Critical Ones
Details: https://t.co/g0ChYETFPo
Google has released an important Chrome 153 security update that fixes 42 vulnerabilities across the browser, including three bugs rated Critical.
The Stable… pic.twitter.com/a8vGqqH4bC
— Cyber Security News (@The_Cyber_News) September 16, 2026
The Biggest Threats Addressed in This Patch
The vulnerabilities patched in this update span across various core Chrome components, including graphics processing, browser services, and user-interface handling. Some of the most severe flaws include:
- Buffer Overflows in ANGLE: Google fixed multiple critical buffer overflow vulnerabilities (including CVE-2026-95350, CVE-2026-95281, and CVE-2026-95284) in ANGLE, which is Chrome’s graphics translation layer. An attacker could exploit this simply by tricking a user into visiting a website equipped with malicious graphics content.
- WebGL and GPU Flaws: The update resolves critical out-of-bounds write vulnerabilities in the GPU component and WebGL (such as CVE-2026-95357 and CVE-2026-95329). These flaws occur when software writes data beyond its allocated memory area, which can lead to browser crashes, data theft, or remote code execution.
- Use-After-Free Vulnerabilities: Chrome 154 also patches critical “use-after-free” bugs in components like ServiceWorker, Fullscreen, and AdFilter. These happen when an application continues to access memory after it has been freed up, creating an opening for attackers to manipulate memory and escape the browser’s safety sandbox.
- V8 JavaScript Engine Fixes: High-severity type confusion and out-of-bounds write flaws were also patched in V8, Chrome’s JavaScript engine, which could have been exploited via specially crafted web pages.
To prevent hackers from reverse-engineering the patch and exploiting users who haven’t updated yet, Google is restricting access to the deep technical details of these bugs until a majority of users have installed the update.
Also Read: Meta Connect 2026: Mark Zuckerberg Debuts New Smart Glasses Lineup
How These Flaws Put Users at Risk
Web browsers are a constant target for threat actors because they handle untrusted web content daily while providing access to sensitive data, from cloud services to financial accounts.
If left unpatched, the vulnerabilities fixed in Chrome 154 could result in:
- Remote Code Execution (RCE): Attackers could run malicious scripts on your operating system without your knowledge.
- Data Exposure: Sensitive personal or corporate data could be scraped from your browser sessions.
- System Hijacking: Hackers could potentially gain control of the browser process and, by extension, parts of your device.
How to Update Google Chrome Immediately
Google is rolling out Chrome version 154.0.8037.57 for Linux and versions 154.0.8037.57/.58 for Windows and macOS gradually. While Chrome usually updates in the background when you close and reopen your browser, you should not wait for the automatic trigger given the severity of these flaws.
Follow these simple steps to manually force the update:
- Open Google Chrome on your computer.
- Click on the three vertical dots (the menu icon) in the top-right corner of the browser window.
- Scroll down to Help and click on About Google Chrome.
- Chrome will automatically check for the latest update and begin downloading it.
- Once the download is complete, click the Relaunch button to apply the patch.
For IT Administrators: Ensure that all managed devices across your organization receive the Chrome 154 update through your endpoint-management platforms immediately to secure your enterprise network.