Chrome 154: 22 Sep stable (108 fixes) + 29 Sep 154.0.8037.92/.93 (32 more incl. Critical CVE-2026-102331 ANGLE)
Google Chrome Releases promoted Chrome 154 to stable on 22 September 2026 (154.0.8037.57 Linux; 154.0.8037.57/.58 Windows/Mac) with 108 security fixes (Critical ANGLE/GPU/WebGL/ServiceWorker examples CVE-2026-95350 / 95281 / 95284 / 95357 / 95322 / 95349 / 95329 and others).
UPDATE 29 Sep 2026: Stable Channel Update for Desktop rolls 154.0.8037.92/.93 (Windows/Mac) and 154.0.8037.92 (Linux) with 32 additional security fixes, including Critical CVE-2026-102331 (buffer overflow in ANGLE) plus High Mojo/V8/GPU/WebGPU/UAF issues (e.g. CVE-2026-102317, 102299, 102323, 102326, 102328). Bug details may stay restricted until majority uptake. SecurityWeek 30 Sep also notes companion Firefox ESR security trains (MFSA 2026-100 / 2026-99).
Distinct from desk chrome-153-firefox-156-20260915. Primary: Chrome Releases 22 Sep + 29 Sep; wire: SecurityWeek 30 Sep.
- Product
- Google Chrome / Chromium desktop (Windows, Mac, Linux)
- Versions
- Update to Chrome ≥154.0.8037.92 (Linux) or ≥154.0.8037.92/.93 (Windows/Mac). Prior 154.0.8037.57/.58 from 22 Sep is superseded for the 29 Sep security train.
- Exploited in Australia?
- unknown
- Patch to
- Update Chrome via Help → About Google Chrome (or enterprise management) to 154.0.8037.92/.93+; verify managed endpoints left the 22 Sep 154.0.8037.57/.58 build; prioritise fleets given Critical ANGLE CVE-2026-102331 in the 29 Sep train.