Google has released an urgent Chrome security update addressing more than 32 vulnerabilities affecting several important parts of the browser. The latest release includes one critical-severity flaw, multiple high-severity vulnerabilities and a collection of medium- and low-rated security issues. Because some of these weaknesses could potentially lead to memory corruption or code execution, users on Windows, macOS and Linux are strongly advised to update Chrome as soon as possible.
Critical ANGLE Vulnerability Rated 9.6
The most serious vulnerability addressed in the update is tracked as CVE-2026-102331 and carries a critical CVSS 3.1 base score of 9.6 out of 10. The flaw is a buffer overflow vulnerability affecting ANGLE in Google Chrome. If successfully exploited, it could corrupt memory and potentially enable code execution within Chrome's browser context.
Buffer overflow vulnerabilities occur when software writes more data into an area of memory than it is designed to handle. Depending on the circumstances, this can result in application crashes, memory corruption or opportunities for attackers to execute unintended code. With CVE-2026-102331 receiving such a high severity score, it is one of the main reasons users should prioritise installing the latest Chrome release.
Multiple High-Severity V8 Vulnerabilities Patched
The update also fixes several high-severity vulnerabilities in Chrome's V8 JavaScript engine. These include multiple type-confusion issues tracked as CVE-2026-102299, CVE-2026-102323, CVE-2026-102326, CVE-2026-102328 and CVE-2026-102321. Type-confusion vulnerabilities happen when software incorrectly handles an object as a different type, potentially resulting in memory corruption or arbitrary code execution.
Another high-severity issue, CVE-2026-102302, involves a buffer overflow in V8. Since the V8 engine processes JavaScript from websites, a malicious webpage could potentially be crafted to trigger the vulnerability, causing the browser to crash or opening the possibility of further exploitation. Technical details for several of the vulnerabilities are being restricted temporarily while the updated Chrome release reaches a larger number of users.
Memory-Safety Flaws Affect Several Chrome Components
Beyond ANGLE and V8, Google has also fixed a range of memory-safety vulnerabilities across several Chrome components. These include issues affecting GPU, WebGPU, WebGL, Dawn, Skia, Media, Bluetooth, Views, Passwords, FullScreen and Picture-in-Picture. The wide range of affected components highlights how complex modern browsers have become and why regular security updates remain so important.
Several of the patched vulnerabilities involve use-after-free weaknesses affecting Bluetooth, Views, Passwords, FullScreen and Picture-in-Picture. A use-after-free vulnerability occurs when a program continues using a memory location after that memory has already been released. In some cases, attackers can combine these weaknesses with other vulnerabilities to achieve code execution or other forms of compromise.
Which Chrome Versions Are Affected
The vulnerabilities affect Chrome versions earlier than 154.0.8037.92/.93 on Windows and Mac systems. Linux users are affected if they are running a version earlier than 154.0.8037.92. Anyone who has not recently restarted or manually checked Chrome for updates should verify the installed browser version.
The Stable channel has now been updated to version 154.0.8037.92/.93 for Windows and Mac. Linux users should update to version 154.0.8037.92. These versions include the security fixes addressing the vulnerabilities covered in the latest Chrome release.
How To Update Google Chrome
Updating Chrome is relatively straightforward. Users can open the browser, click the three-dot Menu in the upper-right corner and navigate to Help > About Google Chrome. Chrome will automatically check for the latest available version and begin installing the update when one is available.
Once the update has finished downloading and installing, the browser must be relaunched to complete the process. This final step is important because Chrome may continue running the older version until it has been restarted. Users who tend to leave their browser open for long periods should therefore make sure the relaunch is completed.
Why Browser Security Updates Matter
Modern web browsers constantly process complex content including JavaScript, graphics, video, images and other web technologies. Vulnerabilities in components such as V8, WebGL, GPU processing or media handling can therefore provide attackers with potential opportunities when users visit malicious or compromised websites. Keeping Chrome updated reduces exposure to vulnerabilities that have already been identified and patched.
For organisations, browser patching should also form part of routine endpoint security management. Systems that remain several releases behind can accumulate known vulnerabilities and increase the overall attack surface of the environment. Automatic updates should remain enabled wherever possible, while managed devices should be monitored to ensure security releases are deployed promptly.
Final Thoughts
Google's latest Chrome update addresses more than 32 vulnerabilities, including the critical CVE-2026-102331 buffer overflow with a CVSS score of 9.6 and several high-severity flaws affecting the V8 JavaScript engine. Additional memory-safety weaknesses have also been fixed across components including GPU, WebGPU, WebGL, Bluetooth, Passwords and Picture-in-Picture, making this an important security release for Chrome users.
Windows and Mac users should ensure they are running Chrome 154.0.8037.92/.93, while Linux users should be on version 154.0.8037.92. Checking the About Google Chrome page and completing the required restart is the quickest way to confirm that the latest security protections are fully applied.
Comments 0