Google Chrome Update Patches 32 Security Flaws Across Platforms

Key Takeaways

• Google has released an urgent update for its Chrome browser, addressing 32 security vulnerabilities.
• The update impacts Windows, macOS, and Linux users of Google Chrome.
• One critical buffer overflow (CVE-2026-102331) and multiple high-severity flaws, including several type confusion issues, have been patched.
• Users are strongly advised to update their Chrome browsers immediately to version 154.0.8037.92/.93 (Windows/Mac) or 154.0.8037.92 (Linux).

Major Chrome Update Addresses 32 Security Flaws

Google has rolled out a critical stable channel update for its Chrome browser, patching a total of 32 security vulnerabilities across Windows, macOS, and Linux platforms. The extensive update includes fixes for one critical flaw and numerous high-severity issues affecting core components such as V8, ANGLE, GPU, WebGPU, Bluetooth, Passwords, and the user interface.

The updated browser versions are 154.0.8037.92 or .93 for Windows and Mac users, while Linux users will receive version 154.0.8037.92. Google anticipates that the new release will be distributed to its user base over the coming days and weeks.

Critical and High-Severity Vulnerabilities Addressed

Foremost among the patched flaws is CVE-2026-102331, identified as a critical ANGLE buffer overflow. This vulnerability poses a significant risk as it can lead to memory corruption and potentially allow for arbitrary code execution within the Chrome browser’s context.

The update also resolves several high-severity vulnerabilities within Chrome’s V8 JavaScript engine. These include multiple type confusion issues, specifically tracked as CVE-2026-102299, CVE-2026-102323, CVE-2026-102326, CVE-2026-102328, and CVE-2026-102321. Type confusion flaws arise when software misinterprets the data type of an object, which can result in memory corruption or enable an attacker to execute arbitrary code.

Additionally, Google addressed CVE-2026-102302, another high-severity buffer overflow within the V8 engine. Given that V8 processes JavaScript from web pages, a malicious website could potentially trigger a browser crash or exploit this vulnerability to compromise a user’s system.

Broader Security Enhancements

Beyond the critical and V8-specific flaws, Google has implemented fixes for a range of other memory-safety issues impacting various Chrome components. These include GPU, WebGPU, WebGL, Dawn, Skia, Media, Bluetooth, Views, Passwords, FullScreen, and Picture-in-Picture functionalities.

Notable among these are several use-after-free vulnerabilities found in Bluetooth, Views, Passwords, FullScreen, and Picture-in-Picture components. A use-after-free vulnerability occurs when a program attempts to access memory after it has been deallocated. Such flaws are frequently exploited by attackers, often in conjunction with other vulnerabilities, to achieve arbitrary code execution.

The update also resolves CVE-2026-102329, a high-severity cross-site scripting (XSS) vulnerability in WebUI. XSS flaws can enable attackers to inject malicious scripts into trusted web pages or browser interfaces, potentially leading to the exposure of sensitive user information or manipulation of browser settings.

Further security improvements encompass patches for improper privilege management in Mojo, missing authorization checks in CORS and Payments, incorrect authorization in WebView and SiteIsolation, and user interface misrepresentation issues affecting the Omnibox, TabStrip, and SignIn components.

In line with its standard security practices, Google has restricted access to detailed technical information regarding several of these bugs. This measure is a preventative step designed to minimize the window of opportunity for attackers to exploit the vulnerabilities before a majority of Chrome users have applied the update.

What You Should Do

• Update Immediately: Open Google Chrome, navigate to the browser menu (three dots in the top right), select “Help,” and then “About Google Chrome.” The browser will automatically check for and download the latest update.
• Relaunch Chrome: After the update is downloaded, you will be prompted to relaunch your browser to complete the installation process.
• Verify Version: Ensure your Chrome browser is running version 154.0.8037.92/.93 (Windows/Mac) or 154.0.8037.92 (Linux) to confirm the patch has been applied.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.