Chrome 154 Arrives With 108 Security Fixes

Google moved Chrome 154 to its Stable channel for desktop on September 22. Security firm Malwarebytes reported that the release carries 108 security fixes, and that 11 of them are rated critical.

Background: a short list of website upkeep jobs and what an SSL certificate does for you.

Chrome updates itself, but the fix does not take effect until the browser restarts. On a busy office computer, that can take days.

What Changed

Per Malwarebytes, the desktop version is 154.0.8037.57 or .58 on Windows and Mac, and 154.0.8037.57 on Linux. Google is rolling it out over the coming days and weeks, so not every computer gets it at once.

Malwarebytes named three of the fixed bugs:

• CVE-2026-95281, a critical buffer overflow in ANGLE, the part of Chrome that draws graphics.
• CVE-2026-95350, another buffer overflow in ANGLE.
• CVE-2026-95357, an out of bounds write in the GPU code.

Chrome for Android 155.0.8059.16 also went out to a small share of users as an early stable release.

Why It Matters for Your Business

Your staff likely use Chrome to reach your bank, your payment system and your customer records. A browser with known holes is an easy way in for attackers.

Your website matters too. A major browser release can change how pages draw or how forms behave. A quick check after each big update catches problems before customers do.

What to Do Now

1. On each work computer, open Chrome and go to Settings, then About Chrome.
2. Let it download the update, then click Relaunch.
3. Open your own website and test the pages that make you money, like the contact form, the booking page or the checkout.

If you manage many computers, your IT provider can push the update and the restart for you.