Overview
- Google released Chrome 154 to the stable channel on Tuesday, distributing builds 154.0.8037.57/.58 for Windows and macOS and 154.0.8037.57 for Linux with Android and iOS updates also published.
- The update closes 108 security flaws grouped as 11 critical, 25 high, 47 medium, and 25 low severity issues.
- Critical bugs include buffer overflows in ANGLE and WebGL, out‑of‑bounds writes in the GPU and WebGL components, and multiple use‑after‑free flaws in ServiceWorker, Fullscreen, WindowDialog and AdFilter.
- External researchers reported 32 of the fixes, including nine critical bugs, and Google has paid $18,000 in bounties so far with additional rewards still to be determined.
- Google says none of the patched bugs are known to be exploited in the wild and urges immediate updating because graphics‑translation code like ANGLE and GPU memory errors can let crafted web pages run code on users' machines.